Public High School – Fine (Italy, 2020)

Fine
DPA Garanteperlaprotezio2 June 2020Italy
final
ePrivacy
Fine

An Italian high school posted personal details of its teaching staff online without a valid reason. This included sensitive information like health data, which violated privacy rules. Schools and public institutions should ensure they have a legal basis before sharing personal data online.

What happened

A public high school in Italy published personal details of its teaching staff on its website without a valid legal basis.

Who was affected

The teaching staff of the school, whose personal details like addresses and health information were disclosed.

What the authority found

The Garante found that the school unlawfully disclosed personal data without a valid legal basis, violating GDPR's principles of lawfulness and data minimization.

Why this matters

This case highlights the importance of public institutions ensuring they have a legal basis for processing and sharing personal data. It serves as a reminder for schools to review their data handling practices to comply with privacy laws.

GDPR Articles Cited

Art. 5(1)(a) GDPR
Art. 6(1)(c) GDPR
Art. 6(1)(e) GDPR
Art. 9(1) GDPR
Art. 9(2) GDPR
Art. 9(4) GDPR
Full Legal Summary
Detailed

The case involved unlawful disclosure of personal data on a school website, not related to cookies or consent mechanisms.

Related Enforcement Actions (0)

No other enforcement actions found for Public High School in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

2 June 2020

Authority

DPA Garanteperlaprotezio

GDPRhub ID

gdprhub-2197

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Public High School - Italy (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: