Details:
Summary | The Italian DPA has imposed a fine of EUR on Università degli studi di Cassino e del Lazio Meridionale. A professor at the university had filed a complaint against the university for allegedly processing their personal data unlawfully. In the course of its investigation, the DPA found that the controller had disclosed personal data of the data subject regarding criminal proceedings to third parties without a valid legal basis. |
Link: | link |
Related articles: | Art. 5 (1) a) GDPR, Art. 6 GDPR, Art. 10 GDPR, Art. 2-ter Codice della privacy, Art. 2-octies Codice della privacy |
Type: | Non-compliance with general data processing principles |
Fine: | EUR 4,000 |
Sector | Public Sector and Education |
All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/