Italy

Private individual

1,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2022-11-24.

Rank · Sector

#182

of 351 in Individuals and Private Associations

Rank · Italy

#519

of 543

Rank · All fines

#2,648

of 3,042

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2022-11-24
Controller / Processor: Private individual
Sector: Individuals and Private Associations
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 9 GDPR, Art. 32 GDPR, Art. 2-septies (8) Codice della privacy
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 1,000 on a private individual. Two individuals had filed a complaint with the DPA due to the fact that the controller had published personal data of them and their families in their dissertation. The individuals had participated in treatments conducted by the controller, but they had not consented to the publication of their data in the dissertation in an unanonymized form.

Open original source Links to the regulator's original publication or another source.