Italy

Region of Tuscany

16,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2022-05-26.

Rank · Sector

#143

of 357 in Public Sector and Education

Rank · Italy

#218

of 543

Rank · All fines

#1,156

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2022-05-26
Controller / Processor: Region of Tuscany
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) c) GDPR, Art. 6 (1) c) GDPR, Art. 6 (2) GDPR, Art. 6 (3) b) GDPR, Art. 2-ter (1), (3) Codice della privacy
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 16,000 on the Region of Tuscany. The region had published documents on its website containing information on professionals from the tourism sector who had applied for emergency aid in the context of the covid-19 pandemic. The documents showed, among other things, the name, address of the data subjects as well as the amount of aid granted.

Open original source Links to the regulator's original publication or another source.