Fino

Garante per la protezione dei dati personali (Italy) · 1 June 2021

Associazione Rousseau

About: Processor obligations

FineNo fineViolation found
Regulator
Garante per la protezione dei dati personali (Italy)
Decided
1 June 2021
Country
Italy
Sector
Not given
Regulator’s reference
9592011
Fino case number
2021/IT/088
Export as PDF

What happened

The Italian DPA ordered Associazione Rousseau, the owner of a digital platform for participatory democracy, to give “Movimento 5 Stelle,” a populist political group, access to the personal data of all its members. The DPA clarified that under Article 28(3)(g) GDPR, a processor must return all data to a controller that no longer wants to use its services.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

  • Processor obligations

Sources

The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.

Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2021/IT/088.