# Comune di Castellanza: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2021-03-25
- Original: https://www.enforcementtracker.com/ETid-674
- Canonical: https://overview.legal/posts/46789
- Topics: Personal Data, Education, IP Address, Public Authority, Processing, Processing Agreement, Public Sector, Supervisory Authorities

## Summary

The Italian DPA (Garante) has imposed a fine of EUR 4,000 on the municipality of Castellanza. The municipality had uploaded documents containing personal data of the data subject on its website, which were freely accessible. The documents concerned a legal proceeding of the data subject.

## Full text

The Italian DPA (Garante) has imposed a fine of EUR 4,000 on the municipality of Castellanza. The municipality had uploaded documents containing personal data of the data subject on its website, which were freely accessible. The documents concerned a legal proceeding of the data subject.

GDPR Articles: Art. 5 (1) a), c) GDPR, Art. 6 (1) c), e) GDPR, Art. 6 (2) GDPR, Art. 6 (3) b) GDPR
Industry: Public Sector and Education

---
Generated by overview.legal · https://overview.legal/posts/46789 · 2026-08-22