Italy

Istituto Comprensivo Statale “F.S. Cabrini

2,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2024-01-24.

Rank · Sector

#322

of 357 in Public Sector and Education

Rank · Italy

#475

of 543

Rank · All fines

#2,353

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2024-01-24
Controller / Processor: Istituto Comprensivo Statale “F.S. Cabrini
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a) GDPR, Art. 6 (1) c), e) GDPR, Art. 2-ter (1), (3) Codice della privacy
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 2,000 on Istituto Comprensivo Statale “F.S. Cabrini. The controller had published a document, which contained personal data of school employees on its website. In the course of its investigation, the DPA found that the school had published the data without a valid legal basis and therefore had acted unlawfully.

Open original source Links to the regulator's original publication or another source.