an unnamed data subject – €3,000 Fine (Italy, 2022)
The Italian data protection authority fined a municipality EUR 3,000 for posting the names of excluded candidates from a competition online without a legal reason. This case matters because it shows that public bodies must respect privacy rules even when sharing competition results.
What happened
The municipality published the names of excluded candidates from a competition on its website without a legal basis.
Who was affected
Candidates who were excluded from a competition and had their names published online.
What the authority found
The authority decided that the municipality processed personal data without a legal basis, violating GDPR's lawfulness requirements.
Why this matters
This decision emphasizes that public administrations must carefully consider privacy laws when disclosing personal information. It reinforces the need for clear legal grounds before sharing personal data, even in public competitions.
GDPR Articles Cited
National Law Articles
Entities Involved
The case involved the unlawful publication of personal data of an excluded candidate from a competition procedure.
Violations (1)
Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.
Art. 6(1) GDPR
Related Enforcement Actions (2)
Other enforcement actions involving an unnamed data subject in IT
Fine
€3K
Similar Cases
Enforcement actions with similar violations
Details
Fine Date
28 April 2022
Authority
Garante per la protezione dei dati personali
Fine Amount
€3,000
GDPRhub ID
gdprhub-5037About this data
Cite as: Cookie Fines. an unnamed data subject - Italy (2022). Retrieved from cookiefines.eu
Last updated: