Comune di Santo Stefano Belbo
Non-compliance with general data processing principles
Date de décision
17 décembre 2020
Autorité
Italian Data Protection Authority (Garante)
IT
Secteur
Public Sector and Education
Pays
IT
Droit
GDPRStatut
FINALDescription
The Italian DPA (Garante) imposed a fine of EUR 4,000 on the municipality of Santo Stefano Belbo. The reason for this was that the controller had published two documents on a legal settlement of the data subject on its website. The documents were not only freely accessible, but could also be downloaded. The documents contained personal data and information about the data subject, including, in addition to his first and last name, a confirmation of the payment of legal costs, the IBAN code of his checking account, information about the lawsuit and the amounts paid in favor of the data subject.