Azienda regionale per lo sviluppo e per i servizi in agricoltura (ARSAC)

€50,000

Non-compliance with general data processing principles

Дата принятия решения

13 марта 2025 г.

Авторитет

Italian Data Protection Authority (Garante)

IT

Сектор

Public Sector and Education

Страна

IT

Закон

GDPR

Статус

FINAL

Описание

The Italian DPA imposed a fine of EUR 50,000 on the Regional agency for development and services in agriculture (ARSAC). The controller processed geographic data of its employees without sufficient legal basis. The controller also failed to provide sufficient informations in its internal documents regarding the data procession, breached the basic principles of lawfullness, fairness, transparency and purpose limitation and failed to conduct a data protection impact assesement. The total sum of the fine can be reduced by 50% if paid within sixty days.

Юридические цитаты

Art. 5Art. 6Art. 13Art. 25Art. 35Art. 88

Проблемы и нарушения

Non-compliance with general data processing principles

Будьте в курсе событий, связанных с соблюдением конфиденциальности

Мы уважаем вашу конфиденциальность. Одно письмо в месяц, без спама, отказ от подписки в любое время.