Italy

Agenzia Regionale per la Tutela dell'Ambiente dell'Abruzzo

8,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2022-03-10.

Rank · Sector

#104

of 212 in Employment

Rank · Italy

#312

of 543

Rank · All fines

#1,499

of 3,039

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2022-03-10
Controller / Processor: Agenzia Regionale per la Tutela dell'Ambiente dell'Abruzzo
Sector: Employment
Quoted Articles: Art. 5 (1) a), c) GDPR, Art. 6 GDPR, Art. 10 GDPR, Art. 2-ter Codice della privacy, Art. 2-octies Codice della privacy
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA (Garante) has fined the Agenzia Regionale per la Tutela dell'Ambiente dell'Abruzzo EUR 8,000. A former employee of the environmental agency had filed a complaint with the DPA due to the fact that the agency had freely published documents containing his personal data on its website. The documents contained, among other things, information about the individual's previous employment and criminal information.

Open original source Links to the regulator's original publication or another source.