Italy

Comune di Santo Stefano Belbo

4,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2020-12-17.

Rank · Sector

#263

of 357 in Public Sector and Education

Rank · Italy

#391

of 543

Rank · All fines

#1,895

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2020-12-17
Controller / Processor: Comune di Santo Stefano Belbo
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a), c) GDPR, Art. 6 (1) c), e) GDPR, Art. 6 (2) GDPR, Art. 6 (3) b) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA (Garante) imposed a fine of EUR 4,000 on the municipality of Santo Stefano Belbo. The reason for this was that the controller had published two documents on a legal settlement of the data subject on its website. The documents were not only freely accessible, but could also be downloaded. The documents contained personal data and information about the data subject, including, in addition to his first and last name, a confirmation of the payment of legal costs, the IBAN code of his checking account, information about the lawsuit and the amounts paid in favor of the data subject.

Open original source Links to the regulator's original publication or another source.