Enforcement
EN Data Controller: Insufficient legal basis for data processing
€1,000 fine - Italian Data Protection Authority (Garante)
Content
The Italian DPA has imposed a fine of EUR 1,000 on a data controller. The controller disclosed personal data by sending an email to an address that third parties who were not meant to receive the data had access to.
GDPR Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR
Industry: Not assigned