Italy

Comune di Nichelino

18,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2025-09-11.

Rank · Sector

#136

of 356 in Public Sector and Education

Rank · Italy

#217

of 543

Rank · All fines

#1,132

of 3,042

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2025-09-11
Controller / Processor: Comune di Nichelino
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a), c) GDPR, Art. 6 (1) c), e) GDPR, Art. 12 (3) GDPR, Art. 16 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 18,000 on the Comune di Nichelino. The controller published the sensitive personal data of a former employee, including the decision to terminate their full-time employment, on its website without a sufficient legal basis.

Open original source Links to the regulator's original publication or another source.