Ancel Keys Comprehensive School Castelnuovo Cilento

What happened

The Italian DPA has imposed a fine of EUR 2,000 on the Ancel Keys Comprehensive School in Castelnuovo Cilento. The complainant's child is enrolled at the nursery school run by the controller. The parent received a formal notice excluding their child from enrolment at the nursery school due to compulsory vaccination requirements. This information was also given to the mayor of the municipality, who informed the complainant's spouse about their child's exclusion. Information about data subjects' vaccination status is health data and therefore a category of special personal data. Although the school believed that they had informed the mayor of this information in their capacity as a local health authority, there was no legal basis for disclosing the data subjects' personal data to them.

Summary from the CMS Enforcement Tracker, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 5Principles relating to processing of personal data5(1)(a)Read →

• Data principles
• Unlawful processing