Details:

Summary The Italian DPA has imposed a fine of EUR on Università degli studi di Cassino e del Lazio Meridionale. A professor at the university had filed a complaint against the university for allegedly processing their personal data unlawfully. In the course of its investigation, the DPA found that the controller had disclosed personal data of the data subject regarding criminal proceedings to third parties without a valid legal basis.
Link: link
Related articles:  Art. 5 (1) a) GDPR, Art. 6 GDPR, Art. 10 GDPR, Art. 2-ter Codice della privacy, Art. 2-octies Codice della privacy
Type: Non-compliance with general data processing principles
Fine: EUR 4,000
Sector Public Sector and Education

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law