Regione Lombardia
€50,000
Insufficient legal basis for data processing
Sprendimo priėmimo data
2025 m. balandžio 29 d.
Institucija
Italian Data Protection Authority (Garante)
IT
Sektorius
Public Sector and Education
Šalis
IT
Teisė
GDPRStatusas
FINALAprašymas
The Italian DPA imposed a fine of EUR 50,000 on the Regione Lombardia. The controller tracked its employees' browser activities, including private ones, without a sufficient legal basis.
Teisinės citatos
Art. 5 (1)Art. 6Art. 25Art. 28Art. 35Art. 88
Problemos ir pažeidimai
Insufficient legal basis for data processing