A.S.L. Napoli 1 Centro
Insufficient legal basis for data processing
Karar Tarihi
13 Ocak 2022
Otorite
Italian Data Protection Authority (Garante)
IT
Sektör
Employment
Ülke
IT
Hukuk
GDPRDurum
FINALAçıklama
The Italian DPA (Garante) has imposed a fine of EUR 1,000 on A.S.L. Napoli 1 Centro. An employee at the health authority had filed a complaint with the DPA against the authority.An employee at the health authority had filed a complaint with the DPA against the authority. The health authority had published a press release on its website containing personal data of the data subject and information about a disciplinary procedure.The health authority believed that the publication was lawful since the data subject had already given this information to the press, which in turn had published a report on the matter. However, the DPA concluded that the authority still needed a valid legal basis for the publication, regardless of whether the information had already been published on other media.