Italy

Università degli studi di Cassino e del Lazio Meridionale

4,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2023-04-27.

Rank · Sector

#268

of 357 in Public Sector and Education

Rank · Italy

#400

of 543

Rank · All fines

#1,928

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2023-04-27
Controller / Processor: Università degli studi di Cassino e del Lazio Meridionale
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR, Art. 10 GDPR, Art. 2-ter Codice della privacy, Art. 2-octies Codice della privacy
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has imposed a fine of EUR on Università degli studi di Cassino e del Lazio Meridionale. A professor at the university had filed a complaint against the university for allegedly processing their personal data unlawfully. In the course of its investigation, the DPA found that the controller had disclosed personal data of the data subject regarding criminal proceedings to third parties without a valid legal basis.

Open original source Links to the regulator's original publication or another source.