Italy

Istituto Comprensivo Statale Crucoli Torretta

2,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2020-09-07.

Rank · Sector

#305

of 357 in Public Sector and Education

Rank · Italy

#445

of 543

Rank · All fines

#2,237

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2020-09-07
Controller / Processor: Istituto Comprensivo Statale Crucoli Torretta
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

Publication of personal data of students on the website of the Institute with, inter alia, notes about health and progress in school due to technical failure.

Open original source Links to the regulator's original publication or another source.