Italy

Municipality of Sciacca

6,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-05-28.

Rank · Sector

#238

of 394 in Public Sector and Education

Rank · Italy

#394

of 623

Rank · All fines

#1,779

of 3,267

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-05-28
Controller / Processor: Municipality of Sciacca
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a), c) GDPR, Art. 6 (1) c), e) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 6,000 on the Municipality of Sciacca. The data subject was formerly employed by the data controller, they stated, that their personal data was made accessible on the controllers public website. Although data might be processed by an employer, in this case it was not necessary for the publication to contain personal information as it could have been anonymised.

Open original source Links to the regulator's original publication or another source.