Italy

Comune di Castellanza

4,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2021-03-25.

Rank · Sector

#265

of 357 in Public Sector and Education

Rank · Italy

#393

of 543

Rank · All fines

#1,899

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2021-03-25
Controller / Processor: Comune di Castellanza
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a), c) GDPR, Art. 6 (1) c), e) GDPR, Art. 6 (2) GDPR, Art. 6 (3) b) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA (Garante) has imposed a fine of EUR 4,000 on the municipality of Castellanza. The municipality had uploaded documents containing personal data of the data subject on its website, which were freely accessible. The documents concerned a legal proceeding of the data subject.

Open original source Links to the regulator's original publication or another source.