Cisterna di Latina Municipality
€5,000
Insufficient fulfilment of data subjects rights
Decision Date
10 de novembro de 2022
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Public Sector and Education
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA has imposed a fine of EUR 5,000 on Cisterna di Latina municipality. An individual had filed a complaint with the DPA because the municipality had not responded to their request for access to their personal data in a timely manner. During its investigation, the DPA found that the municipality had mistakenly sent the data requested by the data subject to a third party rather than to the data subject. In addition, the DPA found that the municipality failed to appoint a new data protection officer several months after the initially appointed data protection officer resigned.
Legal Citations
Art. 5Art. 12Art. 37
Issues & Violations
Insufficient fulfilment of data subjects rights