# Scuola Statale Secondaria di I^ grado 'Bianco-Pascol': Insufficient legal basis for data processing

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2022-12-15
- Original: https://www.enforcementtracker.com/ETid-1626
- Canonical: https://overview.legal/posts/47741
- Topics: Education, Healthcare, Health Data, Public Authority, Processing Agreement, Public Sector, Processing, Special Categories of Data, Types of Special Categories of Personal Data, Supervisory Authorities

## Summary

The Italian DPA has imposed a fine of EUR 3,000 on the school 'Scuola Statale Secondaria di I^ grado 'Bianco-Pascoli', di Fasano (BR)'. The educational institution had published a document, containing personal health data of some students, in the school's electronic register. In the course of its investigation, the DPA found that the school had published the data without a valid legal basis and thus acted unlawfully. In addition, the school failed to respond to requests for information in a time

## Full text

The Italian DPA has imposed a fine of EUR 3,000 on the school 'Scuola Statale Secondaria di I^ grado 'Bianco-Pascoli', di Fasano (BR)'. The educational institution had published a document, containing personal health data of some students, in the school's electronic register. In the course of its investigation, the DPA found that the school had published the data without a valid legal basis and thus acted unlawfully. In addition, the school failed to respond to requests for information in a timely manner.

GDPR Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 9 GDPR, Art. 12 GDPR, Art. 2-ter Codice della privacy, Art. 2-sexies Codice della privacy
Industry: Public Sector and Education

---
Generated by overview.legal · https://overview.legal/posts/47741 · 2026-08-22