Italy

Istituto di Istruzione Superiore Della Corte Vanvitelli

4,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-10-20.

Rank · Sector

#297

of 396 in Public Sector and Education

Rank · Italy

#466

of 625

Rank · All fines

#2,102

of 3,275

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-10-20
Controller / Processor: Istituto di Istruzione Superiore Della Corte Vanvitelli
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR, Art. 9 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 4,000 on Istituto di Istruzione Superiore Della Corte Vanvitelli. The controller, a secondary school uploaded documents to their webiste, contianing information regarding the election of the workplace union representatives. The document contained the candidates list with their name, job, date and place of birth, signatures, home adresses and copies of their ID cards. Two candidates filed complaints through their lawyers, the controller subsequently removed the documents.

Open original source Links to the regulator's original publication or another source.