Italy

Comune di San Nicandro Garganico

3,600 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-10-20.

Rank · Sector

#299

of 396 in Public Sector and Education

Rank · Italy

#469

of 625

Rank · All fines

#2,120

of 3,275

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-10-20
Controller / Processor: Comune di San Nicandro Garganico
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a), c) GDPR, Art. 6 (1) c), e), (2), (3) b) GDPR, Art. 37 (7) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 3,600 on Comune di San Nicandro Garganico. A council resolution regarding the payment of a labour court judgement was uploaded to the "Transparent Administration" section of the municipal website. The resolution named the claimant and the amount awarded. It remained accessible for one year; however, at the data subject's request, the municipality refused to redact the document. During the subsequent investigation, it was also found that a change of DPO had not been notified.

Open original source Links to the regulator's original publication or another source.