Comune di Ustica
€500
Non-compliance with general data processing principles
Date de décision
6 juin 2024
Autorité
Italian Data Protection Authority (Garante)
IT
Secteur
Public Sector and Education
Pays
IT
Droit
GDPRStatut
FINALDescription
The Italian DPA has imposed a fine of EUR 500 on Comune di Ustica. The municipality had published a document, containing personal data (including health data) of private individuals. In the course of its investigation, the DPA found that the municipality had published the data without a valid legal basis and therefore had acted unlawfully.
Citations légales
Art. 5 (1)Art. 6 (1)Art. 6 (2)Art. 6 (3)Art. 9 (1)Art. 37 (7)Art. 2Art. 2
Questions et violations
Non-compliance with general data processing principles