Municipality
€6,000
Insufficient legal basis for data processing
Decision Date
24 de janeiro de 2024
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Public Sector and Education
Country
CZ
Law
GDPRStatus
FINALDescription
The Italian DPA has imposed a fine of EUR 6,000 on a municipality. The municipality had unlawfully published information on citizens' Covid cases on its Facebook page. The municipality also failed to appoint a data protection officer and provide the authority with their contact details in due time.
Legal Citations
Art. 5 (1)Art. 6 (1)Art. 9Art. 37 (7)Art. 2Art. 2Art. 2Art. 157
Issues & Violations
Insufficient legal basis for data processing