# Villabate municipality: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2022-05-12
- Original: https://www.enforcementtracker.com/ETid-1290
- Canonical: https://overview.legal/posts/47405
- Topics: Personal Data, Public Authority, Supervisory Authorities, IP Address, Employees, Processing, Processing Agreement

## Summary

The Italian DPA has fined Villabate municipality EUR 6,000. The municipality had disclosed personal data of a former employee to unauthorized third parties without a valid legal basis. The DPA also found that the municipality had not appointed a data protection officer.

## Full text

The Italian DPA has fined Villabate municipality EUR 6,000. The municipality had disclosed personal data of a former employee to unauthorized third parties without a valid legal basis. The DPA also found that the municipality had not appointed a data protection officer.

GDPR Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR, Art. 37 (1) a) GDPR, Art. 37 (7) GDPR, Art. 38 (6) GDPR
Industry: Employment

---
Generated by overview.legal · https://overview.legal/posts/47405 · 2026-08-22