Italy

Ufficio Scolastico Regionale per la Lombardia, Ufficio IV - Ambito Territoriale di Brescia

6,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2023-01-11.

Rank · Sector

#214

of 357 in Public Sector and Education

Rank · Italy

#336

of 543

Rank · All fines

#1,637

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2023-01-11
Controller / Processor: Ufficio Scolastico Regionale per la Lombardia, Ufficio IV - Ambito Territoriale di Brescia
Sector: Public Sector and Education
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 9 GDPR, Art. 2-ter Codice della privacy, Art. 2-septies (8) Codice della privacy
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 6,000 on Ufficio Scolastico Regionale per la Lombardia, Ufficio IV - Ambito Territoriale di Brescia. The school board had published a document, which contained personal health data of a teacher on its website. In the course of its investigation, the DPA found that the school had published the data without a valid legal basis and therefore had acted unlawfully.

Open original source Links to the regulator's original publication or another source.