Italy

Professional association

3,500 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2024-05-23.

Rank · Sector

#274

of 357 in Public Sector and Education

Rank · Italy

#411

of 543

Rank · All fines

#1,973

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2024-05-23
Controller / Processor: Professional association
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a), d) GDPR Art. 6 GDPR, Art. 27 (7) GDPR, Art. 2-ter Codice della privacy
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has imposed a fine of EUR 3,500 on a professional association. An individual had filed a complaint with the DPA, for the unlawful publication of their personal data. The individual had reported another person to the professional association for the unlawful use of a professional title. The association then forwarded the report to its disciplinary board and informed the accused and also put the complainant on CC with the result that their identity was also revealed to the accused.

Open original source Links to the regulator's original publication or another source.