Italy

Comune di Isola del Gran Sasso

3,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2025-09-25.

Rank · Sector

#165

of 213 in Employment

Rank · Italy

#436

of 543

Rank · All fines

#2,137

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2025-09-25
Controller / Processor: Comune di Isola del Gran Sasso
Sector: Employment
Quoted Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR, Art. 10 GDPR, Art. 12 (3), (4) GDPR, Art. 17 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 3,000 on the Comuni di Isola del Gran Sasso. The controller published a resolution on its institutional website which included the personal data of an employee, including information relating to criminal proceedings against said employee. The controller also failed to adequately respond to a request by the data subject to exercise their rights.

Open original source Links to the regulator's original publication or another source.