Italy

Municipality of Mirabella Imbaccari

1,800 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-05-14.

Rank · Sector

#342

of 367 in Public Sector and Education

Rank · Italy

#526

of 573

Rank · All fines

#2,499

of 3,106

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-05-14
Controller / Processor: Municipality of Mirabella Imbaccari
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a), c) GDPR, Art. 6 (1) c), e), (2), (3) b) GDPR, Art. 37 (1) a), (7) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 1,800 on the Municipality of Mirabella Imbaccari. The data subject filed a complaint stating that the data controller had made their personal data accessible via its website. Documents relating to the data subject's legal proceedings could be downloaded, and these documents contained the data subject's name or initials. The data controller was not permitted to publish the data subject's personal data in this manner. Furthermore the controller had not appointed a Data Protection Officer or provided contact details for the relevant Data Protection Authority.

Open original source Links to the regulator's original publication or another source.