Italy

Municipality of Sciacca

6,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-05-28.

Rank · Sector

#234

of 385 in Public Sector and Education

Rank · Italy

#385

of 604

Rank · All fines

#1,738

of 3,170

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-05-28
Controller / Processor: Municipality of Sciacca
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a), c) GDPR, Art. 6 (1) c), e) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 6,000 on the Municipality of Sciacca. The data subject was formerly employed by the data controller, they stated, that their personal data was made accessible on the controllers public website. Although data might be processed by an employer, in this case it was not necessary for the publication to contain personal information as it could have been anonymised.

Open original source Links to the regulator's original publication or another source.