Azienda regionale per lo sviluppo e per i servizi in agricoltura (ARSAC)
Non-compliance with general data processing principles
Data da decisão
13 de março de 2025
Autoridade
Italian Data Protection Authority (Garante)
IT
Setor
Public Sector and Education
País
IT
Lei
GDPRStatus
FINALDescrição
The Italian DPA imposed a fine of EUR 50,000 on the Regional agency for development and services in agriculture (ARSAC). The controller processed geographic data of its employees without sufficient legal basis. The controller also failed to provide sufficient informations in its internal documents regarding the data procession, breached the basic principles of lawfullness, fairness, transparency and purpose limitation and failed to conduct a data protection impact assesement. The total sum of the fine can be reduced by 50% if paid within sixty days.