Italy

Conservatory

5,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-02-26.

Rank · Sector

#251

of 357 in Public Sector and Education

Rank · Italy

#380

of 543

Rank · All fines

#1,846

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-02-26
Controller / Processor: Conservatory
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a), c) GDPR, Art. 6 GDPR, Art. 10 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 5,000 on a Conservatory. The controller sent an email to over one hundred employees informing them that a former Administrative Director had been dismissed due to disciplinary measures. The email included further details of the reasons for the dismissal, including the fact that the former employee had previously been subject to criminal proceedings.

Open original source Links to the regulator's original publication or another source.