Istituto San Giuseppe La Salle di Milano – €12,000 Fine (Italy, 2026)

€12,000Garante per la protezione dei dati personali29 January 2026Italy
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Istituto San Giuseppe La Salle di Milano was fined EUR 12,000 for mishandling video footage of a minor's accident. The school failed to inform the minor's parents about the data processing and did not provide them with the video. This case highlights the importance of transparency in handling personal data, especially when it involves children.

What happened

The school used video surveillance but did not inform the minor's parents about the data processing related to an accident.

Who was affected

The minor involved in the accident and their parents were affected by the school's actions.

What the authority found

The Italian data protection authority ruled that the school violated data protection rules by not informing the parents about the video footage.

Why this matters

This ruling emphasizes the need for organizations to be transparent when processing personal data, particularly for minors. Schools and similar institutions should ensure that parents are informed about any data collection practices.

GDPR Articles Cited

AI-verified

Art. 6(GDPR)
Art. 35(GDPR)
Art. 5(1)(a) GDPR
Art. 88(GDPR)
Art. 12(1) GDPR
Art. 13(1) GDPR
View original scraped data
Art. 5(1) a) GDPR
b) GDPR
Art. 6(GDPR)
Art. 12(1) GDPR
Art. 13(1) GDPR
Art. 35(GDPR)
Art. 88(GDPR)

Original data from scraper before AI verification against source document.

Source verified 13 March 2026
articles corrected
national law identified
Full Legal Summary
Detailed

The Italian DPA has imposed a fine of EUR 12,000 on the Istituto San Giuseppe La Salle di Milano. The controller uses video surveillance in its building. During school hours, a minor was involved in an accident which was captured by a surveillance camera. A video of the incident, playing on a computer screen, was then captured on a mobile phone and provided to a private investigator working for the insurance company from which the minor's parents claimed damages. However, the video had not been provided to the minor's parents, who had also not been informed about the data processing.

Related Enforcement Actions (0)

No other enforcement actions found for Istituto San Giuseppe La Salle di Milano in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

29 January 2026

Authority

Garante per la protezione dei dati personali

Fine Amount

€12,000

Enforcement Tracker ID

ETid-3062

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Istituto San Giuseppe La Salle di Milano - Italy (2026). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: