Professional association
€3,500
Non-compliance with general data processing principles
Decision Date
May 23, 2024
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Public Sector and Education
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA has imposed a fine of EUR 3,500 on a professional association. An individual had filed a complaint with the DPA, for the unlawful publication of their personal data. The individual had reported another person to the professional association for the unlawful use of a professional title. The association then forwarded the report to its disciplinary board and informed the accused and also put the complainant on CC with the result that their identity was also revealed to the accused.
Legal Citations
Art. 5 (1)Art. 6Art. 27 (7)Art. 2
Issues & Violations
Non-compliance with general data processing principles