Villabate municipality
€6,000
Non-compliance with general data processing principles
Decision Date
May 12, 2022
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Employment
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA has fined Villabate municipality EUR 6,000. The municipality had disclosed personal data of a former employee to unauthorized third parties without a valid legal basis. The DPA also found that the municipality had not appointed a data protection officer.
Legal Citations
Art. 5 (1)Art. 6Art. 37 (1)Art. 37 (7)Art. 38 (6)
Issues & Violations
Non-compliance with general data processing principles