A.S.L. Napoli 1 Centro
Insufficient legal basis for data processing
Dátum rozhodnutia
13. januára 2022
Úrad
Italian Data Protection Authority (Garante)
IT
Sektor
Employment
Krajina
IT
Právo
GDPRStav
FINALPopis
The Italian DPA (Garante) has imposed a fine of EUR 1,000 on A.S.L. Napoli 1 Centro. An employee at the health authority had filed a complaint with the DPA against the authority.An employee at the health authority had filed a complaint with the DPA against the authority. The health authority had published a press release on its website containing personal data of the data subject and information about a disciplinary procedure.The health authority believed that the publication was lawful since the data subject had already given this information to the press, which in turn had published a report on the matter. However, the DPA concluded that the authority still needed a valid legal basis for the publication, regardless of whether the information had already been published on other media.