Enforcement · Italian Data Protection Authority (Garante) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Istituto Comprensivo 2 C.D. “G. Modugno” S.M. “G. Galilei” di Monopoli: Insufficient legal basis for data processing

€4,000 Fine
Istituto Comprensivo 2 C.D. “G. Modugno” S.M. “G. Galilei” di Monopoli
ITALY
Art. 5 GDPR Art. 6 GDPR Art. 9 GDPR
Education Controllers Processing Agreement Public Authority Processing Data Controller Public Sector Supervisory Authorities
Jul 10, 2025 Source

How it connects

Related across sources

News What Happened to the Risk-Based Approach to Data Transfers? Future of Privacy Forum Literature General Data Protection Regulation (GDPR) ambiguity, national diversity and data protection officer certification: Implementing Art. 39(1) GDPR in France, Italy, Luxembourg and Spain Journal of Data Protection Privacy Guidance Guidelines 07/2020 on the concepts of controller and processor in the GDPR EDPB Literature GDPR Implementation Series ∙ Hungary: Introduction to the GDPR Application and a Brief History of Data Protection European Data Protection Law Review Case Law Unabhängiges Landeszentrum für Datenschutz v Wirtschaftsakademie Schleswig-Holstein CJEU Literature GDPR Implementation Series ∙ Netherlands: The GDPR Implementation Act European Data Protection Law Review

Full text

The Italian DPA has imposed a fine of EUR 4,000 on Istituto Comprensivo 2 C.D. “G. Modugno” S.M. “G. Galilei” di Monopoli. The controller published a list with the name of pupils with disabilities on its website without a sufficient legal basis.

Industry: Public Sector and Education

Original document at the source www.garanteprivacy.it

Similar Content