Italy

Municipality of Buccino

6,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2025-09-11.

Rank · Sector

#218

of 357 in Public Sector and Education

Rank · Italy

#339

of 543

Rank · All fines

#1,652

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2025-09-11
Controller / Processor: Municipality of Buccino
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a), c) GDPR, Art. 6 (1) c), e), (2), (3) b) GDPR, Art. 9 GDPR, Art. 13 (1), b) GDPR, Art. 37 (7) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 6,000 on the Municipality of Buccino. The controller published pictures of minors and people with mental health conditions in multiple Facebook posts without a sufficient legal basis. The controller also failed to adequately communicate the contact details of the DPO.

Open original source Links to the regulator's original publication or another source.