Italy

Comune di Conflenti

2,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2021-02-25.

Rank · Sector

#176

of 213 in Employment

Rank · Italy

#450

of 543

Rank · All fines

#2,250

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2021-02-25
Controller / Processor: Comune di Conflenti
Sector: Employment
Quoted Articles: Art. 5 (1) a), c) GDPR, Art. 6 (1) c), e) GDPR, Art. 6 (2) GDPR, Art. 6 (3) b) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA (Garante) imposed a fine of EUR 2,000 on the municipality of Conflenti. A former employee of the municipality filed a complaint with the DPA because a document containing her personal data, including information about her employment with the municipality and an excerpt from the termination letter, was published on the municipality's website.

Open original source Links to the regulator's original publication or another source.