- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Comune di Palermo – €40,000 Fine (Italy, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The municipality of Palermo was fined for failing to protect a person's personal data from unauthorized access. This is important because it shows that organizations must take security seriously to protect people's information. Local governments need to implement better security measures to prevent data breaches.
What happened
The municipality allowed an unauthorized person to access and use personal data from a food subsidy application.
Who was affected
A person who applied for a food subsidy and had their data accessed without permission was affected.
What the authority found
The Italian DPA found that the municipality did not have adequate security measures in place, violating GDPR requirements.
Why this matters
This ruling emphasizes the responsibility of public entities to safeguard personal data. It highlights the need for municipalities to strengthen their data protection practices.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 12 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Italian DPA (Garante) has imposed a fine of EUR 40,000 on the municipality of Palermo. A data subject had filed a complaint with the Italian DPA against the municipality of Palermo. His complaint was based on the fact that his personal data from a food subsidy application he had submitted had been acquired by an unauthorized person and processed for his own purposes. As the DPA determined in the course of its investigations, such processing had occurred because the municipality had not implemented adequate technical and organizational measures to ensure the security and confidentiality of the processing.
Related Enforcement Actions (0)
No other enforcement actions found for Comune di Palermo in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
15 April 2021
Authority
Garante per la protezione dei dati personali
Fine Amount
€40,000
About this data
Cite as: Cookie Fines. Comune di Palermo - Italy (2021). Retrieved from cookiefines.eu
Last updated: