Municipality of Nepi
€20,000
Non-compliance with general data processing principles
决定日期
2024年6月20日
权力
Italian Data Protection Authority (Garante)
IT
部门
Public Sector and Education
国家
IT
法律
GDPR现状
FINAL说明
The Italian DPA has imposed a fine of EUR 20,000 on the municipality of Nepi. The controller had published a document containing the ranking list of a pre-selection test for a public competition, which included personal data of the participants. During its investigation, the DPA found that the controller did not have a valid legal basis for publishing this personal data.
法律引文
Art. 5 (1)Art. 6Art. 28Art. 2
问题与违规
Non-compliance with general data processing principles