Italy

Policoro municipality

26,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2022-08-01.

Rank · Sector

#96

of 357 in Public Sector and Education

Rank · Italy

#175

of 543

Rank · All fines

#948

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2022-08-01
Controller / Processor: Policoro municipality
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a), e) GDPR, Art. 5 (2) GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 24 GDPR, Art. 38 (6) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has imposed a fine of EUR 26,000 on Policoro municipality. The municipality had installed a video surveillance system without, however, providing sufficient information about the surveillance. In addition, the DPA found that the municipality had not established a retention period for the video surveillance recordings and kept them for an excessive period of time. In addition, the DPA found that the municipality had not fulfilled its obligations in appointing a data protection officer. The municipality had appointed its attorney as data protection officer, which the DPA found constituted a conflict of interest.

Open original source Links to the regulator's original publication or another source.