Enforcement · Italian Data Protection Authority (Garante) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Istituto di Istruzione Superiore 'P. Galluppi' Tropea: Insufficient legal basis for data processing

€4,000 Fine
Istituto di Istruzione Superiore 'P. Galluppi' Tropea
ITALY
Art. 5 GDPR Art. 6 GDPR Art. 9 GDPR
Employees Fairness & Transparency Biometric Data Special Categories of Data Controllers IP Address Types of Special Categories of Personal Data Personal Data
Mar 27, 2025 Source

How it connects

Related across sources

News Danish SA Declares Use of Google Analytics Unlawful Without Supplementary Measures Datatilsynet News De Deense beschermingsautoriteit (SA) heeft verklaard dat het gebruik van Google Analytics onrechtmatig is zonder aanvullende maatregelen. Datatilsynet News De Ierse autoriteit voor gegevensbescherming heeft Instagram een boete van 405 miljoen euro opgelegd vanwege schendingen van de privacy van kinderen. Hunton Andrews Kurth News Irish Data Protection Commissioner Fines Instagram EUR 405M for Children Privacy Violations Hunton Andrews Kurth Guidance Guidelines 1/2020 on processing personal data in the context of connected vehicles and mobility related applications EDPB Case Law Meta Platforms v noyb CJEU

Full text

The Italian DPA has imposed a fine of EUR 2,500 on the Istituto di Istruzione Superiore 'P. Galluppi' Tropea. The controller processed biometric data of its employees to control their work hours. The processing was designed in a way that, according to the DPA, did not comply with the principles of lawfulness, fairness and transparency and lacked a sufficient legal basis.

Industry: Employment

Original document at the source www.gpdp.it

Similar Content