Italian Data Protection Authority (Garante) · 6 March 2020
Liceo Scientifico Nobel di Torre del Greco
Insufficient legal basis for data processing
- Regulator
- Italian Data Protection Authority (Garante)
- Decided
- 6 March 2020
- Country
- Italy
- Sector
- Public Sector and Education
- Regulator’s reference
- Not recorded
- Fino case number
- 2020/IT/039
What happened
The Italian Data Protection Authority (Garante) imposed a fine of EUR 4,000 on a high school for having published full lists of teachers on its official website. The data controller disseminated personal data of teachers, as well as data related to their health status, without appropriate legal grounds, as required by art. 6 GDPR and art 2-ter and 2-septies of the Italian Privacy Code, and going against the principles of fairness and minimisation set forth by art. 5 GDPR.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal dataRead →
- Art. 6Lawfulness of processingRead →
- Art. 9Processing of special categories of personal dataRead →
- Data principles
- Special categories
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2020/IT/039.