# Università degli Studi di Teramo: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2026-10-07
- Original: https://www.enforcementtracker.com/ETid-3349
- Canonical: https://overview.legal/posts/603864
- Topics: Supervisory Authorities

## Summary

The Italian Data Protection Authority (Garante) fined Università degli Studi di Teramo €4,000 for lacking a sufficient legal basis and failing to ensure lawfulness in its processing of employee personal data. The authority found the university in violation of GDPR Articles 5(1)(a) and (c), as well as Article 6(1)(c), (e), (2), and (3), which concern the principles of lawfulness, fairness, and transparency in an employment context.

## Full text

Italian Data Protection Authority (Garante) fined Università degli Studi di Teramo €4,000 on 2026-10-07 for: Insufficient legal basis for data processing.
GDPR Articles: Art. 5 (1) a), c) GDPR, Art. 6 (1) c), e), (2), (3) GDPR
Sector: Employment
Country: Italy
Source: https://www.gpdp.it/web/guest/home/docweb/-/docweb-display/docweb/10309253

---
Generated by overview.legal · https://overview.legal/posts/603864 · 2026-10-24