Cisterna di Latina municipality: Insufficient fulfilment of data subjects rights

The Italian DPA has imposed a fine of EUR 5,000 on Cisterna di Latina municipality. An individual had filed a complaint with the DPA because the municipality had not responded to their request for access to their personal data in a timely manner. During its investigation, the DPA found that the municipality had mistakenly sent the data requested by the data subject to a third party rather than to the data subject. In addition, the DPA found that the municipality failed to appoint a new data protection officer several months after the initially appointed data protection officer resigned.

GDPR Articles: Art. 5 GDPR, Art. 12 GDPR, Art. 37 GDPR
Industry: Public Sector and Education