Italy

San Severo municipality

10,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2023-09-14.

Rank · Sector

#91

of 213 in Employment

Rank · Italy

#295

of 543

Rank · All fines

#1,407

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2023-09-14
Controller / Processor: San Severo municipality
Sector: Employment
Quoted Articles: Art. 5 (1) a) GDPR, Art. 6 (1) c), e) GDPR, Art. 2-ter Codice della privacy
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA imposed a fine of EUR 10,000 on San Severo municipality. The municipality had published a document containing personal data of employees on its website without a valid legal basis.

Open original source Links to the regulator's original publication or another source.