Italian Data Protection Authority (Garante) · 13 February 2020
Comune di Urago
Insufficient legal basis for data processing
- Regulator
- Italian Data Protection Authority (Garante)
- Decided
- 13 February 2020
- Country
- Italy
- Sector
- Public Sector and Education
- Regulator’s reference
- Not recorded
- Fino case number
- 2020/IT/037
What happened
the Italian Data Protection Authority (Garante) imposed a fine of EUR 4,000 on the Municipality of Urago d'Oglio for having published the full text of the judgment involving Mrs. XXX - an employee of the Municipality - on its official website. The data controller disseminated personal data of the employee, as well as data related to her health status, without appropriate legal grounds, as required by art. 6 GDPR and art 2-ter and 2-septies of the Italian Privacy Code, and going against the principles of fairness and minimisation set forth by art. 5 GDPR.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Data principles
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2020/IT/037.