Municipality of Nepi
€20,000
Non-compliance with general data processing principles
決定日
2024年6月20日
権威
Italian Data Protection Authority (Garante)
IT
セクター
Public Sector and Education
国名
IT
法律
GDPRステータス
FINAL説明
The Italian DPA has imposed a fine of EUR 20,000 on the municipality of Nepi. The controller had published a document containing the ranking list of a pre-selection test for a public competition, which included personal data of the participants. During its investigation, the DPA found that the controller did not have a valid legal basis for publishing this personal data.
法的引用
Art. 5 (1)Art. 6Art. 28Art. 2
問題と違反
Non-compliance with general data processing principles