Comune di Commezzadura
Insufficient legal basis for data processing
תאריך ההחלטה
25 בפברואר 2021
סמכות
Italian Data Protection Authority (Garante)
IT
סקטור
Employment
מדינה
IT
חוק
GDPRסטטוס
FINALתיאור
The Italian DPA (Garante) imposed a fine of EUR 6,000 on the municipality of Commezzadura. A former employee of the municipality filed a complaint with the DPA because a document containing his personal data was published on the municipality's website. The document contained the confirmation and acceptance of the employee's voluntary termination of employment and information about the employment relationship at that time, including evaluations of his work and information about his health. The data subject also complained that this information had been mentioned in an article in a newspaper. In particular, the article discussed the end of employment and quoted a statement by the mayor of the municipality referring to the fact that the data subject had asked for flexible working hours and had been absent from work during the Christmas vacations due to illness.