Italy

Private individual

1,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2022-11-24.

Rank · Sector

#185

of 356 in Individuals and Private Associations

Rank · Italy

#573

of 604

Rank · All fines

#2,764

of 3,170

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2022-11-24
Controller / Processor: Private individual
Sector: Individuals and Private Associations
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 9 GDPR, Art. 32 GDPR, Art. 2-septies (8) Codice della privacy
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 1,000 on a private individual. Two individuals had filed a complaint with the DPA due to the fact that the controller had published personal data of them and their families in their dissertation. The individuals had participated in treatments conducted by the controller, but they had not consented to the publication of their data in the dissertation in an unanonymized form.

Open original source Links to the regulator's original publication or another source.