Tarento municipality

€150,000

Insufficient fulfilment of information obligations

Date de décision

28 avril 2022

Autorité

Italian Data Protection Authority (Garante)

IT

Secteur

Public Sector and Education

Pays

IT

Droit

GDPR

Statut

FINAL

Description

The Italian DPA has imposed a fine of EUR 150,000 on Tarento municipality. The company Amiu S.p.A had operated the local waste collection service on behalf of the municipality. The company had installed several video surveillance cameras with the permission of the municipality to monitor illegal waste disposal. The DPA found that Amiu had posted some images from the cameras on Facebook, showing individuals sufficiently visible making it possible to identify them. During its investigation, the DPA also found that the municipality had not properly regulated the processing with Amiu S.p.A. In addition, the DPA found that the municipality had not provided sufficient information about the video surveillance cameras. The municipality also failed to conduct a data protection impact assessment regarding the installation of the cameras, which would have been necessary for such a large-scale systematic surveillance.

Citations légales

Art. 5Art. 12Art. 13Art. 14Art. 28Art. 35

Questions et violations

Insufficient fulfilment of information obligations

Restez informé sur l'application de la législation en matière de protection de la vie privée

Nous respectons votre vie privée. Un courriel par mois, pas de spam, désabonnement à tout moment.