Italian Data Protection Authority (Garante) · 25 September 2025
Comune di Isola del Gran Sasso
Insufficient legal basis for data processing
Fine€3,000Fine issued
- Regulator
- Italian Data Protection Authority (Garante)
- Decided
- 25 September 2025
- Country
- Italy
- Sector
- Employment
- Regulator’s reference
- Not recorded
- Fino case number
- 2025/IT/028
What happened
A DPA imposed a €3,000 fine on a public authority for unlawfully publishing information about an employee’s ongoing criminal procedure and for failing to respond to their erasure request.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(a)Read →
- Art. 6Lawfulness of processingRead →
- Art. 10Processing of personal data relating to criminal convictions and offencesRead →
- Art. 17Right to erasure (‘right to be forgotten’)Read →
- Data principles
- Data subject rights
- Special categories
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2025/IT/028.