Italy

Roverbella Comprehensive School

1,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2025-12-04.

Rank · Sector

#349

of 357 in Public Sector and Education

Rank · Italy

#531

of 543

Rank · All fines

#2,719

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2025-12-04
Controller / Processor: Roverbella Comprehensive School
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a) GDPR, Art. 6 (1) c), e), (2), (3) GDPR, Art. 9 (1), (2) g), (4) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 1,000 on Roverbella Comprehensive School. The controller has sent an email containing a reminder about the vaccination of pupils under the age of 16, along with an undisclosed list of recipients.

Open original source Links to the regulator's original publication or another source.