Sanction RGPD Italian Data Protection Authority (Garante) — Comune di Commezzadura : 6 k€ (2021)
- Autorité de contrôle
- Italian Data Protection Authority (Garante)
- Pays
- Italie
- Entreprise / secteur
- Comune di Commezzadura
- Montant de l'amende
- 6 k€
- Date de la décision
- 25 février 2021
- Fondement juridique
- Art. 5 (1) a), c), Art. 6, Art. 9
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
The Italian DPA (Garante) imposed a fine of EUR 6,000 on the municipality of Commezzadura. A former employee of the municipality filed a complaint with the DPA because a document containing his personal data was published on the municipality's website. The document contained the confirmation and acceptance of the employee's voluntary termination of employment and information about the employment relationship at that time, including evaluations of his work and information about his health. The data subject also complained that this information had been mentioned in an article in a newspaper. In particular, the article discussed the end of employment and quoted a statement by the mayor of the municipality referring to the fact that the data subject had asked for flexible working hours and had been absent from work during the Christmas vacations due to illness.