Italy

Professional association

3,500 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2024-05-23.

Rank · Sector

#277

of 362 in Public Sector and Education

Rank · Italy

#420

of 555

Rank · All fines

#1,998

of 3,085

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2024-05-23
Controller / Processor: Professional association
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a), d) GDPR Art. 6 GDPR, Art. 27 (7) GDPR, Art. 2-ter Codice della privacy
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has imposed a fine of EUR 3,500 on a professional association. An individual had filed a complaint with the DPA, for the unlawful publication of their personal data. The individual had reported another person to the professional association for the unlawful use of a professional title. The association then forwarded the report to its disciplinary board and informed the accused and also put the complainant on CC with the result that their identity was also revealed to the accused.

Open original source Links to the regulator's original publication or another source.