# Comune di San Nicandro Garganico: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2026-10-20
- Original: https://www.enforcementtracker.com/ETid-3411
- Canonical: https://overview.legal/posts/607770
- Topics: Personal Data, Accountability, Processing, Supervisory Authorities, Public Authority, Transparency

## Summary

The Italian Data Protection Authority (Garante) fined Comune di San Nicandro Garganico €3,600 for failing to establish a sufficient legal basis for personal data processing, citing violations of GDPR Articles 5, 6, and 37. The case involved the public sector and education context, where the municipality could not demonstrate compliance with the lawfulness, fairness, and transparency principles underlying its data processing activities.

## Full text

Italian Data Protection Authority (Garante) fined Comune di San Nicandro Garganico €3,600 on 2026-10-20 for: Insufficient legal basis for data processing.
GDPR Articles: Art. 5 (1) a), c) GDPR, Art. 6 (1) c), e), (2), (3) b) GDPR, Art. 37 (7) GDPR
Sector: Public Sector and Education
Country: Italy
Source: https://www.gpdp.it/web/guest/home/docweb/-/docweb-display/docweb/10314022

---
Generated by overview.legal · https://overview.legal/posts/607770 · 2026-11-14