Italy

Municipality of Modica

45,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2023-07-18.

Rank · Sector

#72

of 356 in Public Sector and Education

Rank · Italy

#128

of 543

Rank · All fines

#760

of 3,042

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2023-07-18
Controller / Processor: Municipality of Modica
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a), c), e) GDPR, Art. 5 (2) GDPR, Art. 12 (1) GDPR, Art. 13 GDPR, Art. 25 GDPR, Art. 28 GDPR, Art. 37 (1), (7) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has imposed a fine of EUR 45,000 on the municipality of Modica for monitoring waste disposal sites with CCTV without providing sufficient information to citizens. During its investigation, the DPA also found that the municipality had not properly regulated the processing with the companies responsible for the CCTV management. The municipality also failed to appoint a data protection officer and stored the recorded images excessively.

Open original source Links to the regulator's original publication or another source.