Regione Lombardia
€50,000
Insufficient legal basis for data processing
Beslissingsdatum
29 april 2025
Autoriteit
Italian Data Protection Authority (Garante)
IT
Sector
Public Sector and Education
Land
IT
Wet
GDPRStatus
FINALBeschrijving
The Italian DPA imposed a fine of EUR 50,000 on the Regione Lombardia. The controller tracked its employees' browser activities, including private ones, without a sufficient legal basis.
Juridische citaten
Art. 5 (1)Art. 6Art. 25Art. 28Art. 35Art. 88
Problemen en overtredingen
Insufficient legal basis for data processing