Municipality of Nepi
€20,000
Non-compliance with general data processing principles
決定日期
2024年6月20日
權限
Italian Data Protection Authority (Garante)
IT
部門
Public Sector and Education
國家
IT
法律
GDPR狀態
FINAL說明
The Italian DPA has imposed a fine of EUR 20,000 on the municipality of Nepi. The controller had published a document containing the ranking list of a pre-selection test for a public competition, which included personal data of the participants. During its investigation, the DPA found that the controller did not have a valid legal basis for publishing this personal data.
法律引文
Art. 5 (1)Art. 6Art. 28Art. 2
問題與違規
Non-compliance with general data processing principles