Conservatorio di Musica S. Cecilia di Roma – €6,000 Fine (Italy, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Italy fined a music conservatory EUR 6,000 for using a recording of a student assembly without permission. The school also had a conflict of interest with its data protection officer. This case underscores the importance of respecting privacy in educational settings.
What happened
The conservatory used unauthorized recordings of a student assembly to discipline a student.
Who was affected
Students at the Conservatorio di Musica S. Cecilia di Roma, particularly those involved in the recorded assembly.
What the authority found
The Italian authority found the conservatory unlawfully processed personal data by using recordings without a valid legal basis.
Why this matters
This decision stresses the need for educational institutions to respect student privacy and avoid conflicts of interest in data protection roles. It serves as a reminder to schools to carefully manage how they handle recordings and personal data.
GDPR Articles Cited
The Italian DPA has imposed a fine of EUR 6,000 on 'Conservatorio di Musica S. Cecilia di Roma'. A student of the educational institution had filed a complaint with the DPA for having received a disciplinary sanction for a statement made during a student assembly. Although it was not supposed to be, the assembly was recorded and the institution used the recordings to base the disciplinary action on it. During its investigation, the DPA determined that the controller did not have a valid legal basis to use the assembly recordings and, therefore, the processing of the student's personal data was unlawful. Also, the DPA found that the educational institution's data protection officer was also the institution's director. The DPA considered this to be an unlawful conflict of interest.
Related Enforcement Actions (0)
No other enforcement actions found for Conservatorio di Musica S. Cecilia di Roma in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
10 November 2022
Authority
Garante per la protezione dei dati personali
Fine Amount
€6,000
Enforcement Tracker ID
ETid-1616
About this data
Cite as: Cookie Fines. Conservatorio di Musica S. Cecilia di Roma - Italy (2022). Retrieved from cookiefines.eu
Last updated: