A.S.L. Napoli 1 Centro

€1,000

Insufficient legal basis for data processing

Decision Date

13 de janeiro de 2022

Authority

Italian Data Protection Authority (Garante)

IT

Sector

Employment

Country

IT

Law

GDPR

Status

FINAL

Description

The Italian DPA (Garante) has imposed a fine of EUR 1,000 on A.S.L. Napoli 1 Centro. An employee at the health authority had filed a complaint with the DPA against the authority.An employee at the health authority had filed a complaint with the DPA against the authority. The health authority had published a press release on its website containing personal data of the data subject and information about a disciplinary procedure.The health authority believed that the publication was lawful since the data subject had already given this information to the press, which in turn had published a report on the matter. However, the DPA concluded that the authority still needed a valid legal basis for the publication, regardless of whether the information had already been published on other media.

Legal Citations

Art. 5Art. 6Art. 2

Issues & Violations

Insufficient legal basis for data processing

Stay Updated on Privacy Enforcement

We respect your privacy. One email per month, no spam, unsubscribe anytime.