A.S.L. Napoli 1 Centro – €1,000 Fine (Italy, 2022)

€1,000Garante per la protezione dei dati personali13 January 2022Italy
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A.S.L. Napoli 1 Centro was fined for publishing an employee's personal data and disciplinary details on its website without a valid reason. This is important because it shows that even if information is already public, organizations still need a legal basis to share it. Businesses should be careful about sharing personal information online.

What happened

A.S.L. Napoli 1 Centro published an employee's personal data and disciplinary information online without a valid legal basis.

Who was affected

An employee of the health authority had their personal and disciplinary information shared publicly.

What the authority found

The privacy authority ruled that the health authority needed a valid legal basis to publish personal data, even if the information was already available in the media.

Why this matters

This case underscores the need for organizations to have a valid legal basis for sharing personal data, regardless of its prior publication. It serves as a warning to ensure compliance with privacy laws when handling sensitive information.

GDPR Articles Cited

Art. 2-ter Codice della privacy GDPR
Art. 5 GDPR
Art. 6 GDPR
Full Legal Summary
Detailed

The Italian DPA (Garante) has imposed a fine of EUR 1,000 on A.S.L. Napoli 1 Centro. An employee at the health authority had filed a complaint with the DPA against the authority.An employee at the health authority had filed a complaint with the DPA against the authority. The health authority had published a press release on its website containing personal data of the data subject and information about a disciplinary procedure.The health authority believed that the publication was lawful since the data subject had already given this information to the press, which in turn had published a report on the matter. However, the DPA concluded that the authority still needed a valid legal basis for the publication, regardless of whether the information had already been published on other media.

Related Enforcement Actions (0)

No other enforcement actions found for A.S.L. Napoli 1 Centro in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

13 January 2022

Authority

Garante per la protezione dei dati personali

Fine Amount

€1,000

Enforcement Tracker ID

ETid-1075

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. A.S.L. Napoli 1 Centro - Italy (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: