Details:
| Summary | The Italian DPA has imposed a fine of EUR 3,000 on the school ‘Scuola Statale Secondaria di I^ grado ‘Bianco-Pascoli’, di Fasano (BR)’. The educational institution had published a document, containing personal health data of some students, in the school’s electronic register. In the course of its investigation, the DPA found that the school had published the data without a valid legal basis and thus acted unlawfully. In addition, the school failed to respond to requests for information in a timely manner. |
| Link: | link |
| Related articles: | Art. 5 GDPR, Art. 6 GDPR, Art. 9 GDPR, Art. 12 GDPR, Art. 2-ter Codice della privacy, Art. 2-sexies Codice della privacy |
| Type: | Insufficient legal basis for data processing |
| Fine: | EUR 3,000 |
| Sector | Public Sector and Education |
All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/