Sanction RGPD Italian Data Protection Authority (Garante) — Policoro municipality : 26 k€ (2022)
- Autorité de contrôle
- Italian Data Protection Authority (Garante)
- Pays
- Italie
- Entreprise / secteur
- Policoro municipality
- Montant de l'amende
- 26 k€
- Date de la décision
- 1 août 2022
- Fondement juridique
- Art. 5 (1) a), e), Art. 5 (2), Art. 12, Art. 13, Art. 24, Art. 38 (6)
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Italian DPA has imposed a fine of EUR 26,000 on Policoro municipality. The municipality had installed a video surveillance system without, however, providing sufficient information about the surveillance. In addition, the DPA found that the municipality had not established a retention period for the video surveillance recordings and kept them for an excessive period of time. In addition, the DPA found that the municipality had not fulfilled its obligations in appointing a data protection officer. The municipality had appointed its attorney as data protection officer, which the DPA found constituted a conflict of interest.