Comune di Commezzadura

€6,000

Insufficient legal basis for data processing

Decision Date

25 de fevereiro de 2021

Authority

Italian Data Protection Authority (Garante)

IT

Sector

Employment

Country

IT

Law

GDPR

Status

FINAL

Description

The Italian DPA (Garante) imposed a fine of EUR 6,000 on the municipality of Commezzadura. A former employee of the municipality filed a complaint with the DPA because a document containing his personal data was published on the municipality's website. The document contained the confirmation and acceptance of the employee's voluntary termination of employment and information about the employment relationship at that time, including evaluations of his work and information about his health. The data subject also complained that this information had been mentioned in an article in a newspaper. In particular, the article discussed the end of employment and quoted a statement by the mayor of the municipality referring to the fact that the data subject had asked for flexible working hours and had been absent from work during the Christmas vacations due to illness.

Legal Citations

Art. 5 (1)Art. 6Art. 9

Issues & Violations

Insufficient legal basis for data processing

Stay Updated on Privacy Enforcement

We respect your privacy. One email per month, no spam, unsubscribe anytime.