Istituto di Istruzione Superiore “G. Renda” di Polistena, Reggio Calabria – €900 Fine (Italy, 2022)

€900Garante per la protezione dei dati personali20 October 2022Italy
final
ePrivacy
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Istituto di Istruzione Superiore “G. Renda” di Polistena was fined for publishing personal information about a teacher's job termination without proper consent. This matters because it shows that schools must respect privacy rules when handling sensitive information. The fine of EUR 900 highlights the importance of following data protection laws.

What happened

The institute published details about a teacher's job termination on its website without proper consent.

Who was affected

The teacher whose employment contract was terminated and whose personal information was published online.

What the authority found

The Garante found that the institute did not have a valid legal basis for publishing the teacher's personal data, violating GDPR's requirements.

Why this matters

This case emphasizes that organizations, including schools, must handle personal data carefully and ensure they have consent before sharing sensitive information. It serves as a warning to all public bodies about the importance of data protection compliance.

GDPR Articles Cited

AI-verified

Art. 6(GDPR)
Art. 24(GDPR)
Art. 5(1)(a) GDPR
Art. 5(1)(c) GDPR
Art. 5(2) GDPR
Art. 25(2) GDPR
View original scraped data
Art. 5(1) GDPR
Art. 5(2) GDPR
Art. 6(GDPR)
Art. 24(GDPR)
Art. 25(GDPR)

Original data from scraper before AI verification against source document.

National Law Articles

AI-identified

Art. 23 Legislative Decree no. 33/2013
Art. 2 ter Legislative Decree no. 196/2003
Source verified 8 April 2026
articles corrected
national law identified
Full Legal Summary
Detailed

A teacher lodged a complaint against his employing institute for publishing on its institutional website the termination of the complainant's permanent employment contract, with measures adopted by the Ministry of Education attached. During a preliminary investigation, the Institute defended itself by explaining that it had acted in accordance with the requests of the Ministry of Education and Article 23 of Legislative Decree no. 33/2013 by publishing summary information containing data strictly necessary to identify the teacher without referring to the reasons for the dismissal. The Institute considered that the disputed publication was in the legitimate interest of third parties and students. It would make it possible to avoid recruiting the same unfit teacher as a temporary replacement, thereby enabling third parties to conclude a new fixed-term employment contract and guaranteeing continuity of teaching for pupils, which is why the publication was not anonymized. He also pointed to the troubled context of the Covid pandemic to justify the treatment. Although the Institute withdrew the publication at the DPA’s request, it did not appear at the hearing scheduled. The DPA considered that the controller has not verified the existence of a specific provision requiring the mandatory publication of a measure containing information on the termination of an employment contract. The Personal Data Protection Code specified that the publication of personal data by public bodies is only authorised where it is provided for by a legislative provision or, in the cases provided for by law, by a regulatory provision, in compliance with the principles of data protection [https://gdpr-info.eu/art-5-gdpr/ (article 5 (1) a) and c) GDPR)]. In addition, the DPA considered that the controller did not check the data and information that it was entitled to publish under the principles of relevance and non-excess. The GDPR reiterates the obligation to implement appropriate measures t

Violations (1)

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Related Enforcement Actions (0)

No other enforcement actions found for Istituto di Istruzione Superiore “G. Renda” di Polistena, Reggio Calabria in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

20 October 2022

Authority

Garante per la protezione dei dati personali

Fine Amount

€900

GDPRhub ID

gdprhub-6018

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Istituto di Istruzione Superiore “G. Renda” di Polistena, Reggio Calabria - Italy (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: