Regione Lombardia
€50,000
Insufficient legal basis for data processing
Karar Tarihi
29 Nisan 2025
Otorite
Italian Data Protection Authority (Garante)
IT
Sektör
Public Sector and Education
Ülke
IT
Hukuk
GDPRDurum
FINALAçıklama
The Italian DPA imposed a fine of EUR 50,000 on the Regione Lombardia. The controller tracked its employees' browser activities, including private ones, without a sufficient legal basis.
Yasal Atıflar
Art. 5 (1)Art. 6Art. 25Art. 28Art. 35Art. 88
Sorunlar & İhlaller
Insufficient legal basis for data processing