Italy

Istituto tecnico industriale statale “Stanislao Cannizzaro” di Catania

10,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-01-29.

Rank · Sector

#189

of 357 in Public Sector and Education

Rank · Italy

#306

of 543

Rank · All fines

#1,452

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-01-29
Controller / Processor: Istituto tecnico industriale statale “Stanislao Cannizzaro” di Catania
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a) GDPR, Art. 6 (1) c), e), (2), (3) GDPR, Art. 9 (1), (2), g), (4) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 10,000 on the Istituto tecnico industriale statale “Stanislao Cannizzaro” di Catania. The controller published the personal and health data of 51 students with disabilities, including their schedules, on its institutional website without a sufficient legal basis.

Open original source Links to the regulator's original publication or another source.