Sanction RGPD Italian Data Protection Authority (Garante) — Comune di Napoli Corpo di Polizia Municipale : 12 k€ (2022)
- Autorité de contrôle
- Italian Data Protection Authority (Garante)
- Pays
- Italie
- Entreprise / secteur
- Comune di Napoli Corpo di Polizia Municipale
- Montant de l'amende
- 12 k€
- Date de la décision
- 22 mai 2022
- Fondement juridique
- Art. 5 (1) a), Art. 6, Art. 88, Art. 113 Codice della privacy
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
The Italian DPA has fined the police authority 'Comune di Napoli Corpo di Polizia Municipale' EUR 12,000. The police authority had sent a list of names, addresses, tax numbers, contact details and appointments for Covid-19 tests of employees to various administrative units via e-mail. The authority referred to the consent given by the employees as the legal basis for the data processing. However, the DPA concluded that the authority could not rely on consent, as voluntary consent is questionable in the employee-employer relationship.