Italy

Comune di Napoli

3,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2023-06-01.

Rank · Sector

#163

of 213 in Employment

Rank · Italy

#428

of 543

Rank · All fines

#2,101

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2023-06-01
Controller / Processor: Comune di Napoli
Sector: Employment
Quoted Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR, Art. 2-ter Codice della privacy
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 3,000 on Comune di Napoli. The municipality had sent three former employees, after termination of their employment an e-mail containing personal evaluation forms as well as a ranking list with the achieved grades of the individuals. This made it possible for all recipients to access the information of the other individuals.

Open original source Links to the regulator's original publication or another source.