Italy

Comune di San Marco in Lamis

3,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2021-03-11.

Rank · Sector

#282

of 357 in Public Sector and Education

Rank · Italy

#416

of 543

Rank · All fines

#2,032

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2021-03-11
Controller / Processor: Comune di San Marco in Lamis
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a), c) GDPR, Art. 6 (1) c), e) GDPR, Art. 6 (2) GDPR, Art. 6 (3) b) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA (Garante) has imposed a fine of EUR 3,000 on the municipality of San Marco in Lamis. The municipality had uploaded documents containing personal data of the data subject and his family freely accessible on its website. The documents were two orders against the data subject. The documents were related to a proceeding against the data subject concerning construction activities without a building permit and contained the date of birth, place of birth, tax number and address of the data subject and his relatives. The data subject had already asked the municipality in advance to remove the documents from the website. However, the municipality did not comply.

Open original source Links to the regulator's original publication or another source.