Università degli Studi di Cassino e del Lazio Meridionale: Non-compliance with general data processing principles

The Italian DPA has imposed a fine of EUR 8,000 on Università degli Studi di Cassino e del Lazio Meridionale. The controller failed to delete a former employee's email address within a reasonable timeframe, and also failed to adequately respond to the former employee's request to delete his data.

GDPR Articles: Art. 5 (1) a), e) GDPR, Art. 6 (1) c), e), (2), (3) b) GDPR, Art. 12 (3), (4) GDPR, Art. 17 GDPR, Art. 21 GDPR
Industry: Employment