Italy

Municipality of Villaputzu

2,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-07-03.

Rank · Sector

#349

of 376 in Public Sector and Education

Rank · Italy

#545

of 595

Rank · All fines

#2,491

of 3,127

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-07-03
Controller / Processor: Municipality of Villaputzu
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a), c) GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 2,000 on the Municipality of Villaputzu. The data subject is a former employee of the municipality and controller. On the controllers website, a decision was published containing the data subjects personal data namely their registration number and the reason for the termination of their employment.

Open original source Links to the regulator's original publication or another source.