Direzione Didattica Statale 1° Circolo-Eboli – €1,500 Fine (Italy, 2022)

€1,500Garante per la protezione dei dati personali28 April 2022Italy
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

An Italian school was fined €1,500 for sharing a document with sensitive student information to all teachers and parents. The document included names and health data, without limiting access to relevant parties. This case emphasizes the need for schools to protect student privacy by carefully managing who can access sensitive information.

What happened

The school shared a document with names and health data of students to all teachers and parents indiscriminately.

Who was affected

Students whose names and health information were shared with all teachers and parents without appropriate restrictions.

What the authority found

The Italian DPA found that the school violated GDPR by not properly restricting access to sensitive student data.

Why this matters

This case serves as a reminder for educational institutions to implement strict data access controls to protect student privacy. Schools must ensure that sensitive information is only shared with those who need to know.

GDPR Articles Cited

Art. 2-sexies Codice della privacy GDPR
Art. 2-ter Codice della privacy GDPR
Art. 5 GDPR
Art. 6 GDPR
Art. 9 GDPR
Full Legal Summary
Detailed

The Italian DPA has imposed a fine of EUR 1,500 on the school 'Direzione Didattica Statale 1° Circolo-Eboli'. The educational institution had sent a document containing the names of all teachers and students, as well as health data of some students, to all teachers and parents, without distinguishing that teachers and parents receive only the information about students that concerns them.

Related Enforcement Actions (0)

No other enforcement actions found for Direzione Didattica Statale 1° Circolo-Eboli in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

28 April 2022

Authority

Garante per la protezione dei dati personali

Fine Amount

€1,500

Enforcement Tracker ID

ETid-1643

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Direzione Didattica Statale 1° Circolo-Eboli - Italy (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: