Enforcement · Italian Data Protection Authority (Garante) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Roverbella Comprehensive School: Insufficient legal basis for data processing

€1,000 Fine
Roverbella Comprehensive School
ITALY
Art. 5 GDPR Art. 6 GDPR Art. 9 GDPR
Education IP Address Controllers Processing Agreement Public Authority Processing Data Controller Supervisory Authorities
Dec 4, 2025 Source

How it connects

Related across sources

News What Happened to the Risk-Based Approach to Data Transfers? Future of Privacy Forum Literature General Data Protection Regulation (GDPR) ambiguity, national diversity and data protection officer certification: Implementing Art. 39(1) GDPR in France, Italy, Luxembourg and Spain Journal of Data Protection Privacy Guidance Guidelines 07/2020 on the concepts of controller and processor in the GDPR EDPB Literature GDPR Implementation Series ∙ Hungary: Introduction to the GDPR Application and a Brief History of Data Protection European Data Protection Law Review Case Law Unabhängiges Landeszentrum für Datenschutz v Wirtschaftsakademie Schleswig-Holstein CJEU Literature GDPR Implementation Series ∙ Netherlands: The GDPR Implementation Act European Data Protection Law Review

Full text

The Italian DPA has imposed a fine of EUR 1,000 on Roverbella Comprehensive School. The controller has sent an email containing a reminder about the vaccination of pupils under the age of 16, along with an undisclosed list of recipients.

Industry: Public Sector and Education

Original document at the source www.garanteprivacy.it

Similar Content