Details:

Summary The Italian DPA has imposed a fine of EUR 1,000 on the Convitto Nazionale Statale ‘Giordano Bruno’ di Maddaloni (CE) boarding school. The boarding school had published a document on its website containing personal data of the data subject without legal basis.
Link: link
Related articles:  Art. 5 (1) a) GDPR, Art. 6 GDPR, Art. 2-ter (1), (3) Codice della privacy
Type: Insufficient legal basis for data processing
Fine: EUR 6,000
Sector Public Sector and Education

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law