Istituto Nazionale Previdenza Sociale (INPS)

€12,000

Insufficient fulfilment of data subjects rights

Decision Date

April 15, 2021

Authority

Italian Data Protection Authority (Garante)

IT

Sector

Public Sector and Education

Country

IT

Law

GDPR

Status

FINAL

Description

The Italian DPA (Garante) has imposed a fine of EUR 12,000 on the Italian National Institute for Social Security (Istituto Nazionale della Previdenza Sociale). That fine was based on the fact that the controller failed to respond properly to two requests for information that the data subject had submitted to the controller. The requests were related to the disclosure of personal data of the data subject to third parties. Initially, the data subject had received no response to either request. In the course of the investigation, the controller then provided him with information and explained that the previous requests had not been answered due to a technical error in its e-mail system

Legal Citations

Art. 5 (1)Art. 12Art. 15

Issues & Violations

Insufficient fulfilment of data subjects rights

Stay Updated on Privacy Enforcement

We respect your privacy. One email per month, no spam, unsubscribe anytime.