Italy

Cisterna di Latina municipality

5,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2022-11-10.

Rank · Sector

#242

of 357 in Public Sector and Education

Rank · Italy

#360

of 543

Rank · All fines

#1,777

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2022-11-10
Controller / Processor: Cisterna di Latina municipality
Sector: Public Sector and Education
Quoted Articles: Art. 5 GDPR, Art. 12 GDPR, Art. 37 GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Italian DPA has imposed a fine of EUR 5,000 on Cisterna di Latina municipality. An individual had filed a complaint with the DPA because the municipality had not responded to their request for access to their personal data in a timely manner. During its investigation, the DPA found that the municipality had mistakenly sent the data requested by the data subject to a third party rather than to the data subject. In addition, the DPA found that the municipality failed to appoint a new data protection officer several months after the initially appointed data protection officer resigned.

Open original source Links to the regulator's original publication or another source.