Italian Data Protection Authority (Garante) · 1 September 2022
Liceo Statale "Edoardo Amaldi”
Insufficient legal basis for data processing
Fine€4,000Fine issued
- Regulator
- Italian Data Protection Authority (Garante)
- Decided
- 1 September 2022
- Country
- Italy
- Sector
- Public Sector and Education
- Regulator’s reference
- Not recorded
- Fino case number
- 2022/IT/063
What happened
The Italian DPA held that an educational institute violated Articles 5, 6 and 9 GDPR because it published a register concerning the scheduled leave of its employees, reasons for the leave, and health data.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal dataRead →
- Art. 6Lawfulness of processingRead →
- Art. 9Processing of special categories of personal dataRead →
- Data principles
- Special categories
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/IT/063.