Italy

Istituto Nazionale di Previdenza Sociale

20,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2024-04-11.

Rank · Sector

#129

of 357 in Public Sector and Education

Rank · Italy

#207

of 543

Rank · All fines

#1,095

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2024-04-11
Controller / Processor: Istituto Nazionale di Previdenza Sociale
Sector: Public Sector and Education
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 2-ter Codice della privacy
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 20,000 on the Italian National Institute of Social Security (INPS). The controller had published personal data of participants in a competitive selection procedure on its website without an appropriate legal basis.

Open original source Links to the regulator's original publication or another source.