# Municipality of Ponte nelle Alpi: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2025-04-10
- Original: https://www.enforcementtracker.com/ETid-2674
- Canonical: https://overview.legal/posts/48789
- Topics: Controllers, IP Address, Employees, Public Authority, Processing, Data Controller, Processing Agreement, Supervisory Authorities

## Summary

The Italian DPA has imposed a fine of EUR 4,000 on the Municipality of Ponte nelli Apli. The controller has performed an evaluation of the performance of their employees. The individual results of each employee, including name, surname, and score, were released to the public. The controller had no legal basis for publishing the personal results.

## Full text

The Italian DPA has imposed a fine of EUR 4,000 on the Municipality of Ponte nelli Apli. The controller has performed an evaluation of the performance of their employees. The individual results of each employee, including name, surname, and score, were released to the public. The controller had no legal basis for publishing the personal results.

GDPR Articles: Art. 5 GDPR, Art. 6 GDPR
Industry: Employment

---
Generated by overview.legal · https://overview.legal/posts/48789 · 2026-08-22