Italy

Scanshare S.r.l.

10,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2022-02-10.

Rank · Sector

#182

of 357 in Public Sector and Education

Rank · Italy

#266

of 543

Rank · All fines

#1,356

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2022-02-10
Controller / Processor: Scanshare S.r.l.
Sector: Public Sector and Education
Quoted Articles: Art. 28 (2) GDPR, Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Italian DPA has imposed a fine of EUR 10,000 on Scanshare S.r.l.. That fine is related to a fine imposed on the Region of Tuscany.
The region stated that it had inadvertently published personal data of 3,548 applicants for administrative assistant positions. The data concerned information that applicants had provided as part of a pre-selection test for application. Scanshare had been entrusted with organizing the pre-selection test. Due to an error on the part of Scanshare, a URL was erroneously published through which the personal data and the results of the test could be viewed.

Open original source Links to the regulator's original publication or another source.