Comune di Santo Stefano Belbo
€4,000
Non-compliance with general data processing principles
Decision Date
December 17, 2020
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Public Sector and Education
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA (Garante) imposed a fine of EUR 4,000 on the municipality of Santo Stefano Belbo. The reason for this was that the controller had published two documents on a legal settlement of the data subject on its website. The documents were not only freely accessible, but could also be downloaded. The documents contained personal data and information about the data subject, including, in addition to his first and last name, a confirmation of the payment of legal costs, the IBAN code of his checking account, information about the lawsuit and the amounts paid in favor of the data subject.
Legal Citations
Art. 5 (1)Art. 6 (1)Art. 6 (2)Art. 6 (3)
Issues & Violations
Non-compliance with general data processing principles