Sanction RGPD Italian Data Protection Authority (Garante) — Municipality of Nepi : 20 k€ (2024)
- Autorité de contrôle
- Italian Data Protection Authority (Garante)
- Pays
- Italie
- Entreprise / secteur
- Municipality of Nepi
- Montant de l'amende
- 20 k€
- Date de la décision
- 20 juin 2024
- Fondement juridique
- Art. 5 (1) a), Art. 6, Art. 28, Art. 2-ter Codice della privacy
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Italian DPA has imposed a fine of EUR 20,000 on the municipality of Nepi. The controller had published a document containing the ranking list of a pre-selection test for a public competition, which included personal data of the participants. During its investigation, the DPA found that the controller did not have a valid legal basis for publishing this personal data.