Italy

Direzione Didattica Statale 1° Circolo-Eboli

1,500 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2022-04-28.

Rank · Sector

#339

of 357 in Public Sector and Education

Rank · Italy

#506

of 543

Rank · All fines

#2,514

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2022-04-28
Controller / Processor: Direzione Didattica Statale 1° Circolo-Eboli
Sector: Public Sector and Education
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 9 GDPR, Art. 2-ter Codice della privacy, Art. 2-sexies Codice della privacy
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 1,500 on the school "Direzione Didattica Statale 1° Circolo-Eboli". The educational institution had sent a document containing the names of all teachers and students, as well as health data of some students, to all teachers and parents, without distinguishing that teachers and parents receive only the information about students that concerns them.

Open original source Links to the regulator's original publication or another source.