Sanction RGPD Italian Data Protection Authority (Garante) — Municipality of Modica : 45 k€ (2023)
- Autorité de contrôle
- Italian Data Protection Authority (Garante)
- Pays
- Italie
- Entreprise / secteur
- Municipality of Modica
- Montant de l'amende
- 45 k€
- Date de la décision
- 18 juillet 2023
- Fondement juridique
- Art. 5 (1) a), c), e), Art. 5 (2), Art. 12 (1), Art. 13, Art. 25, Art. 28, Art. 37 (1), (7)
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Italian DPA has imposed a fine of EUR 45,000 on the municipality of Modica for monitoring waste disposal sites with CCTV without providing sufficient information to citizens. During its investigation, the DPA also found that the municipality had not properly regulated the processing with the companies responsible for the CCTV management. The municipality also failed to appoint a data protection officer and stored the recorded images excessively.