Comune di Ustica
€500
Non-compliance with general data processing principles
Decision Date
6 de junho de 2024
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Public Sector and Education
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA has imposed a fine of EUR 500 on Comune di Ustica. The municipality had published a document, containing personal data (including health data) of private individuals. In the course of its investigation, the DPA found that the municipality had published the data without a valid legal basis and therefore had acted unlawfully.
Legal Citations
Art. 5 (1)Art. 6 (1)Art. 6 (2)Art. 6 (3)Art. 9 (1)Art. 37 (7)Art. 2Art. 2
Issues & Violations
Non-compliance with general data processing principles