Ufficio Scolastico Regionale per la Puglia, Ufficio VI - Ambito Territoriale di Lecce – €15,000 Fine (Italy, 2023)

€15,000Garante per la protezione dei dati personali27 April 2023Italy
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

An Italian school board published a teacher's health data on its website without permission, leading to a EUR 15,000 fine. The Italian data protection authority found this action unlawful due to the lack of a valid legal basis. This serves as a reminder to educational institutions to handle personal data with care and ensure legal compliance.

What happened

A school board published a teacher's personal health data online without a valid legal basis.

Who was affected

The teacher whose health data was unlawfully published on the school's website.

What the authority found

The Italian DPA determined that the school board acted unlawfully by publishing personal health data without a valid legal basis.

Why this matters

This case highlights the importance of obtaining a valid legal basis before sharing personal data. Educational institutions should review their data handling practices to avoid similar breaches.

GDPR Articles Cited

Art. 2-ter Codice della privacy GDPR
Art. 5 GDPR
Art. 6 GDPR
Art. 9 GDPR
Art. 2-septies (8) Codice della privacy GDPR
Full Legal Summary
Detailed

The Italian DPA has imposed a fine of EUR 15,000 on Ufficio Scolastico Regionale per la Puglia, Ufficio VI - Ambito Territoriale di Lecce. The school board had published a document, which contained personal health data of a teacher on its website. In the course of its investigation, the DPA found that the school had published the data without a valid legal basis and therefore had acted unlawfully.

Related Enforcement Actions (0)

No other enforcement actions found for Ufficio Scolastico Regionale per la Puglia, Ufficio VI - Ambito Territoriale di Lecce in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

27 April 2023

Authority

Garante per la protezione dei dati personali

Fine Amount

€15,000

Enforcement Tracker ID

ETid-1925

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Ufficio Scolastico Regionale per la Puglia, Ufficio VI - Ambito Territoriale di Lecce - Italy (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: