Ufficio Scolastico Regionale per la Lombardia, Ufficio IV - Ambito Territoriale di Brescia – €6,000 Fine (Italy, 2023)

€6,000Garante per la protezione dei dati personali11 January 2023Italy
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

An Italian school board was fined €6,000 for publishing a teacher's health data online without permission. This matters because it shows the importance of protecting personal data, especially sensitive information like health details. Businesses should ensure they have a valid reason before sharing personal data online.

What happened

The school board published a document containing a teacher's personal health data on its website without a valid legal basis.

Who was affected

The teacher whose health data was publicly shared on the school board's website.

What the authority found

The Italian DPA found that the school board acted unlawfully by sharing personal health data without a valid legal basis.

Why this matters

This case highlights the need for organizations to carefully handle sensitive information and ensure they have a valid reason for data processing. It serves as a reminder to review data protection practices to avoid similar breaches.

GDPR Articles Cited

Art. 2-ter Codice della privacy GDPR
Art. 5(GDPR)
Art. 6(GDPR)
Art. 9(GDPR)
Art. 2-septies (8) Codice della privacy GDPR
Full Legal Summary
Detailed

The Italian DPA has imposed a fine of EUR 6,000 on Ufficio Scolastico Regionale per la Lombardia, Ufficio IV - Ambito Territoriale di Brescia. The school board had published a document, which contained personal health data of a teacher on its website. In the course of its investigation, the DPA found that the school had published the data without a valid legal basis and therefore had acted unlawfully.

Related Enforcement Actions (0)

No other enforcement actions found for Ufficio Scolastico Regionale per la Lombardia, Ufficio IV - Ambito Territoriale di Brescia in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

11 January 2023

Authority

Garante per la protezione dei dati personali

Fine Amount

€6,000

Enforcement Tracker ID

ETid-1694

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Ufficio Scolastico Regionale per la Lombardia, Ufficio IV - Ambito Territoriale di Brescia - Italy (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: