- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Municipality of Bologna – €40,000 Fine (Italy, 2025)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Municipality of Bologna was fined €40,000 for failing to ensure proper data security while processing sensitive information about children with disabilities. This case highlights the need for organizations to take responsibility for the security of personal data they handle.
What happened
A fine of €40,000 was imposed for failing to secure sensitive data processed by a third-party provider.
Who was affected
Children with disabilities whose sensitive data was not adequately protected.
What the authority found
The authority found that the Municipality did not ensure sufficient security measures were in place for the data processor.
Why this matters
This case underscores the importance of vetting third-party providers and ensuring they comply with data protection standards.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 12 March 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Italian DPA has imposed a fine of EUR 40,000 on the Municipality of Bologna. The controller used a data processor (Cooperativa Sociale Quadrifoglio | ETid: 2274) to process data, including health data, of childreen with disabilities and special needs. The controller failed to ensure, that the processor had sufficient technical and organisational measures to ensure data security, resulting in a data leak.
Related Enforcement Actions (0)
No other enforcement actions found for Municipality of Bologna in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
29 April 2025
Authority
Garante per la protezione dei dati personali
Fine Amount
€40,000
About this data
Cite as: Cookie Fines. Municipality of Bologna - Italy (2025). Retrieved from cookiefines.eu
Last updated: