Sanction RGPD Italian Data Protection Authority (Garante) — Comune di Napoli : 3 k€ (2023)

Autorité de contrôle
Italian Data Protection Authority (Garante)
Pays
Italie
Entreprise / secteur
Comune di Napoli
Montant de l'amende
3 k€
Date de la décision
1 juin 2023
Fondement juridique
Art. 5 (1) a), Art. 6, Art. 2-ter Codice della privacy
Manquement
Base légale insuffisante pour le traitement

Résumé des faits

The Italian DPA has imposed a fine of EUR 3,000 on Comune di Napoli. The municipality had sent three former employees, after termination of their employment an e-mail containing personal evaluation forms as well as a ranking list with the achieved grades of the individuals. This made it possible for all recipients to access the information of the other individuals.

Décision officielle

Italian Data Protection Authority (Garante)

Évaluer votre conformité RGPD avec Data Comply One