Comune di Ustica – €500 Fine (Italy, 2024)

€500Garante per la protezione dei dati personali6 June 2024Italy
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Comune di Ustica was fined €500 by the Garante for publishing personal data, including health information, without a legal basis. This ruling is important because it shows that municipalities must handle personal data responsibly.

What happened

Comune di Ustica published a document containing personal and health data without a valid legal basis.

Who was affected

Individuals whose personal and health data was published by the municipality.

What the authority found

The Garante found that Comune di Ustica acted unlawfully by releasing personal data without proper justification.

Why this matters

This case serves as a reminder for public entities to be cautious when handling personal data. It underscores the need for all organizations to have a valid reason for processing personal information.

GDPR Articles Cited

AI-verified

Art. 2(ter)((1)) GDPR
Art. 2-septies (8) Codice della privacy GDPR
Art. 5(1)(a) GDPR
Art. 6(1)(c) GDPR
Art. 6(2) GDPR
Art. 6(3)(b) GDPR
Art. 9(1) GDPR
Art. 37(7) GDPR
View original scraped data
Art. 5(1) a) GDPR
c) GDPR
Art. 6(1) c) GDPR
e) GDPR
Art. 6(2) GDPR
Art. 6(3) b) GDPR
Art. 9(1) GDPR
(2)
(4) GDPR
Art. 37(7) GDPR
Art. 2(ter)((1)) GDPR
(3) Codice della privacy
Art. 2-septies (8) Codice della privacy

Original data from scraper before AI verification against source document.

Source verified 17 March 2026
articles corrected
national law identified
Full Legal Summary
Detailed

The Italian DPA has imposed a fine of EUR 500 on Comune di Ustica. The municipality had published a document, containing personal data (including health data) of private individuals. In the course of its investigation, the DPA found that the municipality had published the data without a valid legal basis and therefore had acted unlawfully.

Related Enforcement Actions (0)

No other enforcement actions found for Comune di Ustica in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

6 June 2024

Authority

Garante per la protezione dei dati personali

Fine Amount

€500

Enforcement Tracker ID

ETid-2394

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Comune di Ustica - Italy (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: