Municipality – €6,000 Fine (Italy, 2024)

€6,000Garante per la protezione dei dati personali24 January 2024Italy
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

An Italian municipality was fined for posting citizens' Covid case information on Facebook without permission. This case is significant because it shows that public entities must handle personal health data carefully and respect privacy laws.

What happened

The municipality unlawfully published information about citizens' Covid cases on its Facebook page.

Who was affected

Citizens whose Covid case information was shared publicly by the municipality.

What the authority found

The Italian DPA found that the municipality violated GDPR by improperly sharing sensitive health information and failing to appoint a data protection officer.

Why this matters

This case highlights the need for public organizations to protect sensitive personal information. It serves as a reminder for all entities to be cautious when sharing health data online.

GDPR Articles Cited

AI-verified

Art. 2-sexies Codice della privacy GDPR
Art. 2-ter Codice della privacy GDPR
Art. 9(GDPR)
Art. 2-septies (8) Codice della privacy GDPR
Art. 5(1)(a) GDPR
Art. 6(1)(c) GDPR
Art. 157 Codice della privacy GDPR
Art. 37(7) GDPR
View original scraped data
Art. 5(1) a) GDPR
Art. 6(1) c) GDPR
e) GDPR
Art. 9(GDPR)
Art. 37(7) GDPR
Art. 2-ter Codice della privacy
Art. 2-sexies Codice della privacy
Art. 2-septies (8) Codice della privacy
Art. 157 Codice della privacy

Original data from scraper before AI verification against source document.

Source verified 14 March 2026
articles corrected
national law identified
Full Legal Summary
Detailed

The Italian DPA has imposed a fine of EUR 6,000 on a municipality. The municipality had unlawfully published information on citizens' Covid cases on its Facebook page. The municipality also failed to appoint a data protection officer and provide the authority with their contact details in due time.

Related Enforcement Actions (0)

No other enforcement actions found for Municipality in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

24 January 2024

Authority

Garante per la protezione dei dati personali

Fine Amount

€6,000

Enforcement Tracker ID

ETid-2211

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Municipality - Italy (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: