Comune di Napoli
€3,000
Insufficient legal basis for data processing
Decision Date
June 1, 2023
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Employment
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA has imposed a fine of EUR 3,000 on Comune di Napoli. The municipality had sent three former employees, after termination of their employment an e-mail containing personal evaluation forms as well as a ranking list with the achieved grades of the individuals. This made it possible for all recipients to access the information of the other individuals.
Legal Citations
Art. 5 (1)Art. 6Art. 2
Issues & Violations
Insufficient legal basis for data processing