Provincia Autonoma di Bolzano: Non-compliance with general data processing principles

The Italian DPA has imposed a fine of EUR 32,000 on the Provincia Autonoma di Bolzan. The controller implemented video surveillance with automated licence plate recognition capabilities for vehicles, with the aim of guiding policies on mobility and infrastructure and preventing and investigating crimes. However, the controller did not comply with the basic principles of the GDPR, nor did they adequately comply with the DPA.

GDPR Articles: Art. 5 (1) a), e) GDPR, Art. 6 (1) c), e), (2), (3) GDPR, Art. 12 (1) GDPR, Art. 13 GDPR, Art. 21 (4) GDPR, Art. 26 GDPR, Art. 35 GDPR
Industry: Public Sector and Education