A.S.L. Napoli 1 Centro
Insufficient legal basis for data processing
Дата прийняття рішення
13 січня 2022 р.
Влада
Italian Data Protection Authority (Garante)
IT
Сектор
Employment
Країна
IT
Право
GDPRСтатус
FINALОпис
The Italian DPA (Garante) has imposed a fine of EUR 1,000 on A.S.L. Napoli 1 Centro. An employee at the health authority had filed a complaint with the DPA against the authority.An employee at the health authority had filed a complaint with the DPA against the authority. The health authority had published a press release on its website containing personal data of the data subject and information about a disciplinary procedure.The health authority believed that the publication was lawful since the data subject had already given this information to the press, which in turn had published a report on the matter. However, the DPA concluded that the authority still needed a valid legal basis for the publication, regardless of whether the information had already been published on other media.