Regione Lombardia
€50,000
Insufficient legal basis for data processing
Lēmuma datums
2025. gada 29. aprīlis
Iestāde
Italian Data Protection Authority (Garante)
IT
Nozare
Public Sector and Education
Valsts
IT
Likums
GDPRStatuss
FINALApraksts
The Italian DPA imposed a fine of EUR 50,000 on the Regione Lombardia. The controller tracked its employees' browser activities, including private ones, without a sufficient legal basis.
Juridiskās atsauces
Art. 5 (1)Art. 6Art. 25Art. 28Art. 35Art. 88
Jautājumi un pārkāpumi
Insufficient legal basis for data processing