Enforcement
EN Comune di Isola del Gran Sasso: Insufficient legal basis for data processing
€3,000 fine - Italian Data Protection Authority (Garante)
Content
The Italian DPA has imposed a fine of EUR 3,000 on the Comuni di Isola del Gran Sasso. The controller published a resolution on its institutional website which included the personal data of an employee, including information relating to criminal proceedings against said employee. The controller also failed to adequately respond to a request by the data subject to exercise their rights.
GDPR Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR, Art. 10 GDPR, Art. 12 (3), (4) GDPR, Art. 17 GDPR
Industry: Employment