Scuola Statale Secondaria di I^ grado 'Bianco-Pascol'
€3,000
Insufficient legal basis for data processing
Decision Date
December 15, 2022
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Public Sector and Education
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA has imposed a fine of EUR 3,000 on the school 'Scuola Statale Secondaria di I^ grado 'Bianco-Pascoli', di Fasano (BR)'. The educational institution had published a document, containing personal health data of some students, in the school's electronic register. In the course of its investigation, the DPA found that the school had published the data without a valid legal basis and thus acted unlawfully. In addition, the school failed to respond to requests for information in a timely manner.
Legal Citations
Art. 5Art. 6Art. 9Art. 12Art. 2Art. 2
Issues & Violations
Insufficient legal basis for data processing