# Fondazione Rome Technopole: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2026-09-23
- Original: https://www.enforcementtracker.com/ETid-3342
- Canonical: https://overview.legal/posts/603857
- Topics: Public Authority, Supervisory Authorities

## Summary

The Italian Data Protection Authority (Garante) fined Fondazione Rome Technopale €8,000 for processing personal data without a sufficient legal basis, finding violations of Articles 5 and 6 of the GDPR. The enforcement action addressed the public sector and education entity's failure to establish a valid lawful basis under the applicable GDPR provisions.

## Full text

Italian Data Protection Authority (Garante) fined Fondazione Rome Technopole €8,000 on 2026-09-23 for: Insufficient legal basis for data processing.
GDPR Articles: Art. 5 (1) a), c) GDPR, Art. 6 (1) c), e), (2), (3) GDPR
Sector: Public Sector and Education
Country: Italy
Source: https://www.gpdp.it/web/guest/home/docweb/-/docweb-display/docweb/10302434

---
Generated by overview.legal · https://overview.legal/posts/603857 · 2026-10-24