Regione Lombardia

€50,000

Insufficient legal basis for data processing

Fecha de la decisión

29 de abril de 2025

Autoridad

Italian Data Protection Authority (Garante)

Sector

Public Sector and Education

País

Ley

GDPR

Estado

FINAL

Descripción

The Italian DPA imposed a fine of EUR 50,000 on the Regione Lombardia. The controller tracked its employees' browser activities, including private ones, without a sufficient legal basis.

Citas legales

Art. 5 (1)Art. 6Art. 25Art. 28Art. 35Art. 88

Problemas e infracciones

Insufficient legal basis for data processing

Ver documento oficial

Volver a la base de datos de multas

Multa anterior

Italian Data Protection Authority (Garante) - Ordi...

Siguiente multa

Data Protection Authority of Hamburg (HmbBfDI) - C...