Enforcement·Italian Data Protection Authority (Garante)EN
Export
Pietro d'Abano State Vocational School: Insufficient legal basis for data processing
The Italian Data Protection Authority (Garante) fined Pietro d'Abano State Vocational School €1,000 for processing personal data without a sufficient legal basis, finding violations of GDPR Articles 5(1)(a) and 6.
StatusNot cited by any decision here yet
Summary
The enforcement action arose in the public education context, where the Garante determined the school failed to establish a valid lawful condition under Article 6 for its data processing activities.
We hold a reference to this item, not its text.
enforcementtracker.comRead at the sourceHow it connects
Related across sources
C-230/14 Weltimmo s.r.o. v Nemzeti Adatvédelmi és Információszabadság Hatóság The Court of Justice of the European Union (Third Chamber) addressed whether a data protection authority in one Member State may exercise its powers, including imposing penalties,… CJEU ·Third Chamber Oct 1, 2015 Supervision Supervisory Authorities Territorial scope (GDPR)
C-518/07 European Commission v Federal Republic of Germany The Court of Justice of the European Union (Grand Chamber) addressed whether Article 28(1), second subparagraph, of Directive 95/46/EC requires national data protection… CJEU ·Grand Chamber Mar 9, 2010 Supervision Supervisory Authorities Public Authority
C-46/23 Budapest Főváros IV. Kerület Újpest Önkormányzat Polgármesteri Hivatala v Nemzeti Adatvédelmi és Információszabadság Hatóság In a preliminary ruling requested by the Budapest High Court, the Court of Justice interpreted whether Article 58(2)(d) and (g) of the GDPR permits a national supervisory… CJEU ·Fifth Chamber Mar 14, 2024 Right to be Forgotten Personal Data Right to Restriction
C-645/19 Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit In Case C-645/19, the Court of Justice of the European Union (Grand Chamber) addressed a preliminary ruling from the Brussels Court of Appeal concerning Facebook Ireland Ltd and… CJEU ·Grand Chamber Jun 15, 2021 Supervision Supervisory Authorities Controllers
C-245/20 X and Z v Autoriteit Persoonsgegevens In Case C-245/20, the Court of Justice of the European Union interpreted Article 55(3) GDPR in response to a preliminary reference from the Rechtbank Midden-Nederland concerning… CJEU ·First Chamber Mar 24, 2022 Personal Data Material scope (GDPR) Supervision
T-70/23 Data Protection Commission v European Data Protection Board The Irish Data Protection Commission (DPC) challenged provisions of EDPB Binding Decisions 3/2022, 4/2022, and 5/2022, arguing the EDPB exceeded its competence under Article… General Court ·Tenth Chamber, Extended Composition Jan 29, 2025 Supervision Supervisory Authorities Personal Data