- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Istituto di Istruzione Superiore 'P. Galluppi' Tropea – €4,000 Fine (Italy, 2025)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Istituto di Istruzione Superiore 'P. Galluppi' Tropea was fined for improperly processing employee biometric data to track work hours. The Italian data protection authority found that this practice did not meet legal requirements for fairness and transparency. This case highlights the importance of having a valid legal basis when handling sensitive employee information.
What happened
The institution processed biometric data of its employees to monitor their work hours without proper legal grounds.
Who was affected
Employees whose biometric data was used to track their work hours were affected.
What the authority found
The authority ruled that the institution lacked a sufficient legal basis for processing biometric data, violating GDPR principles.
Why this matters
This ruling emphasizes that organizations must ensure compliance with data protection laws when handling sensitive data like biometrics. It serves as a reminder for businesses to review their data processing practices.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 15 March 2026.
Processing notes: articles corrected, amount discrepancy, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Italian DPA has imposed a fine of EUR 2,500 on the Istituto di Istruzione Superiore 'P. Galluppi' Tropea. The controller processed biometric data of its employees to control their work hours. The processing was designed in a way that, according to the DPA, did not comply with the principles of lawfulness, fairness and transparency and lacked a sufficient legal basis.
Related Enforcement Actions (0)
No other enforcement actions found for Istituto di Istruzione Superiore 'P. Galluppi' Tropea in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
27 March 2025
Authority
Garante per la protezione dei dati personali
Fine Amount
€4,000
About this data
Cite as: Cookie Fines. Istituto di Istruzione Superiore 'P. Galluppi' Tropea - Italy (2025). Retrieved from cookiefines.eu
Last updated: