Nursery School “La Combricola Dei Birichini Di Betty”: Non-compliance with general data processing principles

The Italian DPA has imposed a fine of EUR 10,000 on the Nursery School “La Combricola Dei Birichini Di Betty”. The controller only accepted new children if their parents agreed that they could take and use pictures of them for marketing purposes. This resulted in excessive posting of children's pictures on the internet, which did not comply with the GDPR's basic principles.

GDPR Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR, Art. 7 GDPR, Art. 12 (1) GDPR, Art. 13 GDPR, Art. 35 GDPR, Art. 37 (7) GDPR, Art. 38 (6) GDPR
Industry: Public Sector and Education