Italy

Istituto Comprensivo Statale Crucoli Torretta

2,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2020-09-07.

Rank · Sector

#304

of 356 in Public Sector and Education

Rank · Italy

#445

of 543

Rank · All fines

#2,229

of 3,042

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2020-09-07
Controller / Processor: Istituto Comprensivo Statale Crucoli Torretta
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

Publication of personal data of students on the website of the Institute with, inter alia, notes about health and progress in school due to technical failure.

Open original source Links to the regulator's original publication or another source.