# Direzione Didattica Statale 1° Circolo-Eboli: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2022-04-28
- Original: https://www.enforcementtracker.com/ETid-1643
- Canonical: https://overview.legal/posts/47758
- Topics: Education, Health Data, Healthcare, Processing Agreement, Processing, Public Authority, Public Sector, Special Categories of Data, Supervisory Authorities, Types of Special Categories of Personal Data

## Summary

The Italian DPA has imposed a fine of EUR 1,500 on the school 'Direzione Didattica Statale 1° Circolo-Eboli'. The educational institution had sent a document containing the names of all teachers and students, as well as health data of some students, to all teachers and parents, without distinguishing that teachers and parents receive only the information about students that concerns them.

## Full text

The Italian DPA has imposed a fine of EUR 1,500 on the school 'Direzione Didattica Statale 1° Circolo-Eboli'. The educational institution had sent a document containing the names of all teachers and students, as well as health data of some students, to all teachers and parents, without distinguishing that teachers and parents receive only the information about students that concerns them.

GDPR Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 9 GDPR, Art. 2-ter Codice della privacy, Art. 2-sexies Codice della privacy
Industry: Public Sector and Education

---
Generated by overview.legal · https://overview.legal/posts/47758 · 2026-08-22