Comune di Tuscania: Non-compliance with general data processing principles

The Italian DPA has imposed a fine of EUR 12,000 on the Commune di Tuscania. The controller had been using video surveillance and licence plate recognition within its territory for the purposes of territorial security and supervising separate waste collection at recycling centers. However, the controller did not put up any relevant signs containing the privacy policy or warning signs. The controller also failed to enter into data processing agreements with processors handling data on its behalf, failed to adequately respond to data subjects' requests to exercise their rights, and failed to cooperate adequately with the DPA.

GDPR Articles: Art. 5 (1) a) GDPR, Art. 6 (1) c, e), (2), (3) GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 15 GDPR, Art. 28 GDPR, Art. 35 GDPR, Art. 58 (1) GDPR
Industry: Public Sector and Education