Italy

Comune di Commezzadura

6,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2021-02-25.

Rank · Sector

#115

of 213 in Employment

Rank · Italy

#326

of 543

Rank · All fines

#1,611

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2021-02-25
Controller / Processor: Comune di Commezzadura
Sector: Employment
Quoted Articles: Art. 5 (1) a), c) GDPR, Art. 6 GDPR, Art. 9 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA (Garante) imposed a fine of EUR 6,000 on the municipality of Commezzadura. A former employee of the municipality filed a complaint with the DPA because a document containing his personal data was published on the municipality's website. The document contained the confirmation and acceptance of the employee's voluntary termination of employment and information about the employment relationship at that time, including evaluations of his work and information about his health. The data subject also complained that this information had been mentioned in an article in a newspaper. In particular, the article discussed the end of employment and quoted a statement by the mayor of the municipality referring to the fact that the data subject had asked for flexible working hours and had been absent from work during the Christmas vacations due to illness.

Open original source Links to the regulator's original publication or another source.