Enforcement·Italian Data Protection Authority (Garante)EN
Export
Edizioni Grandangolo di Giuseppe Castaldo: Non-compliance with general data processing principles
The Italian Data Protection Authority (Garante) fined Edizioni Grandangolo di Giuseppe Castaldo €2,075 for failing to comply with general data processing principles under Articles 5, 12, 13, 24, 25, 32, and 33 of the GDPR.
StatusNot cited by any decision here yet
Summary
The enforcement action addressed the controller's failure to implement adequate technical and organizational measures, transparency obligations, and breach notification requirements.
We hold a reference to this item, not its text.
enforcementtracker.comRead at the sourceHow it connects
Related across sources
C-340/21 VB v Natsionalna agentsia za prihodite C-340/21 (VB v Natsionalna agentsia) CJEU Dec 14, 2023 Data Breaches Integrity and Confidentiality Principle Notification Obligation
C-768/21 TR v Land Hessen In Case C-768/21, the Court of Justice of the European Union (First Chamber) ruled on a preliminary reference from the Verwaltungsgericht Wiesbaden concerning TR's challenge of… CJEU ·First Chamber Sep 26, 2024 Supervision Data Breaches Integrity and Confidentiality Principle
C-60/22 UZ v Bundesrepublik Deutschland In Case C-60/22, the CJEU (Fifth Chamber) ruled on a preliminary reference from the Verwaltungsgericht Wiesbaden concerning UZ, a third-country national, and the Bundesrepublik… CJEU ·Fifth Chamber May 4, 2023 Right to Restriction Controllers Records of processing activities
Guidelines 9/2022 personal data breach notification under GDPR Guidelines ·EDPB Apr 4, 2023 Notification Obligation Data Breaches Personal Data
14/2021 Cypriot court backs DPA fines of €40,000 each on football clubs and €25,000 on processor On 26 July 2021, a journalist informed the Cypriot DPA of a security vulnerability on an online platform. This online platform hosted ticket purchase sites of two Cypriot football… Administrative Court of Cyprus May 12, 2026 Controllers Processors Privacy by Design & Default
C-526/24 Brillen Rottler GmbH & Co. KG v TC The Court of Justice of the European Union (Fourth Chamber) ruled on whether a controller may refuse a data subject's first access request under Article 15 GDPR on grounds that… CJEU ·Fourth Chamber Mar 19, 2026 Personal Data Right of Access Liability