Regione Lombardia

€50,000

Insufficient legal basis for data processing

Decision Date

29 de abril de 2025

Authority

Italian Data Protection Authority (Garante)

Sector

Public Sector and Education

Country

Law

GDPR

Status

FINAL

Description

The Italian DPA imposed a fine of EUR 50,000 on the Regione Lombardia. The controller tracked its employees' browser activities, including private ones, without a sufficient legal basis.

Legal Citations

Art. 5 (1)Art. 6Art. 25Art. 28Art. 35Art. 88

Issues & Violations

Insufficient legal basis for data processing

View Official Document

Back to Fines Database

Previous Fine

Italian Data Protection Authority (Garante) - Ordi...

Next Fine

Data Protection Authority of Hamburg (HmbBfDI) - C...