Enforcement
EN Roverbella Comprehensive School: Insufficient legal basis for data processing
€1,000 fine - Italian Data Protection Authority (Garante)
Content
The Italian DPA has imposed a fine of EUR 1,000 on Roverbella Comprehensive School. The controller has sent an email containing a reminder about the vaccination of pupils under the age of 16, along with an undisclosed list of recipients.
GDPR Articles: Art. 5 (1) a) GDPR, Art. 6 (1) c), e), (2), (3) GDPR, Art. 9 (1), (2) g), (4) GDPR
Industry: Public Sector and Education