I.N.P.A.S.
€3,000
Insufficient legal basis for data processing
Päätöspäivä
24. huhtikuuta 2024
Viranomainen
Italian Data Protection Authority (Garante)
IT
Ala
Public Sector and Education
Maa
IT
Laki
GDPRTila
FINALKuvaus
The Italian DPA has imposed a fine of EUR 3,000 on I.N.P.A.S. (Istituto Nazionale di Previdenza e di Assistenza Sociale). During its investigation, the DPA found that a former employee had access to databases containing personal data even after the termination of their employment relationship.
Oikeudelliset viittaukset
Art. 5 (1)Art. 6Art. 9Art. 2Art. 2
Asiat ja rikkomukset
Insufficient legal basis for data processing