Sanction RGPD Italian Data Protection Authority (Garante) — Azienda regionale per lo sviluppo e per i servizi in agricoltura (ARSAC) : 50 k€ (2025)
- Autorité de contrôle
- Italian Data Protection Authority (Garante)
- Pays
- Italie
- Entreprise / secteur
- Azienda regionale per lo sviluppo e per i servizi in agricoltura (ARSAC)
- Montant de l'amende
- 50 k€
- Date de la décision
- 13 mars 2025
- Fondement juridique
- Art. 5, Art. 6, Art. 13, Art. 25, Art. 35, Art. 88
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Italian DPA imposed a fine of EUR 50,000 on the Regional agency for development and services in agriculture (ARSAC). The controller processed geographic data of its employees without sufficient legal basis. The controller also failed to provide sufficient informations in its internal documents regarding the data procession, breached the basic principles of lawfullness, fairness, transparency and purpose limitation and failed to conduct a data protection impact assesement. The total sum of the fine can be reduced by 50% if paid within sixty days.