Enforcement·Italian Data Protection Authority (Garante)EN
Export
Istituto di Istruzione Superiore Della Corte Vanvitelli: Insufficient legal basis for data processing
The Italian Data Protection Authority (Garante) fined Istituto di Istruzione Superiore Della Corte Vanvitelli €4,000 for insufficient legal basis for personal data processing in violation of GDPR Articles 5(1)(a), 6, and 9.
StatusNot cited by any decision here yet
We hold a reference to this item, not its text.
enforcementtracker.comRead at the sourceHow it connects
Related across sources
Guidelines 07/2020 concepts of controller and processor in the GDPR Guidelines ·EDPB Jul 7, 2021 Controllers Processors Joint Controllers
Guidelines 05/2020 consent under Regulation 2016/679 Guidelines on consent Guidelines ·EDPB May 4, 2020 Consent Personal Data IP Address
Opinion 03/2022 EDPB-EDPS Joint Opinion 03/2022 on the Proposal for a Regulation on the European Health Data Space Opinion Jul 12, 2022 Healthcare Health Data Types of Special Categories of Personal Data
W292 2292202-1 The data subject is in the military The unit he is employed at (controller) and the data subject are involved in a multitude of legal disputes concerning his employment, disciplinary proceedings, data protection… BVwG - W292 2292202-1 ·Federal Administrative Court Jun 30, 2026 Health Data Integrity and Confidentiality Principle Healthcare
W137 2334258-1/5E Federal Administrative Court · BVwG - W137 2334258-1/5E XXXX as the party lodged a complaint at the Austrian DPA (District Hospital XXXX as the co-party) on the unauthorised sharing of her personal data in seven different instances by… Sep 7, 2026 Legitimate Interest Personal Data Integrity and Confidentiality Principle
Guidelines 9/2022 personal data breach notification under GDPR Guidelines ·EDPB Apr 4, 2023 Notification Obligation Data Breaches Personal Data