Italy

Scuola Statale Secondaria di I^ grado "Bianco-Pascol"

3,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2022-12-15.

Rank · Sector

#287

of 357 in Public Sector and Education

Rank · Italy

#422

of 543

Rank · All fines

#2,084

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2022-12-15
Controller / Processor: Scuola Statale Secondaria di I^ grado "Bianco-Pascol"
Sector: Public Sector and Education
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 9 GDPR, Art. 12 GDPR, Art. 2-ter Codice della privacy, Art. 2-sexies Codice della privacy
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 3,000 on the school "Scuola Statale Secondaria di I^ grado "Bianco-Pascoli", di Fasano (BR)". The educational institution had published a document, containing personal health data of some students, in the school's electronic register. In the course of its investigation, the DPA found that the school had published the data without a valid legal basis and thus acted unlawfully. In addition, the school failed to respond to requests for information in a timely manner.

Open original source Links to the regulator's original publication or another source.