Enforcing jurisdiction
Italy · Geography does not establish applicable law.
Confirmed applicable legislation

Municipality – €6,000 Fine (Italy, 2024)

€6,000Garante per la protezione dei dati personali24 January 2024Italy
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A municipality was fined for unlawfully publishing citizens' Covid case information on its Facebook page. The municipality also failed to appoint a data protection officer. This case shows the importance of protecting personal data and complying with privacy regulations.

What happened

The municipality unlawfully published personal information about citizens' Covid cases on social media.

Who was affected

Citizens whose Covid case information was published without consent.

What the authority found

The authority found that the municipality violated GDPR rules by publishing personal data without a valid legal basis and failing to appoint a data protection officer.

Why this matters

This ruling underscores the need for municipalities to handle personal data responsibly. Public entities should ensure they have proper data protection measures in place to avoid similar violations.

Recorded legal citations
Automatically processed
Art. 2-sexies Codice della privacy GDPR
Art. 2-ter Codice della privacy GDPR
Art. 9 GDPR
Art. 2-septies (8) Codice della privacy GDPR
Art. 5(1)(a) GDPR
Art. 6(1)(c) GDPR
Art. 157 Codice della privacy GDPR
Art. 37(7) GDPR
View original scraped data
Art. 5(1) a) GDPR
Art. 6(1) c) GDPR
e) GDPR
Art. 9(GDPR)
Art. 37(7) GDPR
Art. 2-ter Codice della privacy
Art. 2-sexies Codice della privacy
Art. 2-septies (8) Codice della privacy
Art. 157 Codice della privacy

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 14 March 2026.

Processing notes: articles corrected, national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Italian DPA has imposed a fine of EUR 6,000 on a municipality. The municipality had unlawfully published information on citizens' Covid cases on its Facebook page. The municipality also failed to appoint a data protection officer and provide the authority with their contact details in due time.

Details

Fine Date

24 January 2024

Authority

Garante per la protezione dei dati personali

Fine Amount

€6,000

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Municipality - Italy (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: