Italy

Comune di Napoli Corpo di Polizia Municipale

12,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2022-05-22.

Rank · Sector

#163

of 357 in Public Sector and Education

Rank · Italy

#245

of 543

Rank · All fines

#1,270

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2022-05-22
Controller / Processor: Comune di Napoli Corpo di Polizia Municipale
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR, Art. 88 GDPR, Art. 113 Codice della privacy
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has fined the police authority "Comune di Napoli Corpo di Polizia Municipale" EUR 12,000. The police authority had sent a list of names, addresses, tax numbers, contact details and appointments for Covid-19 tests of employees to various administrative units via e-mail. The authority referred to the consent given by the employees as the legal basis for the data processing. However, the DPA concluded that the authority could not rely on consent, as voluntary consent is questionable in the employee-employer relationship.

Open original source Links to the regulator's original publication or another source.