Details:

Summary The Italian DPA has imposed a fine of EUR 4,000 on the school ‘Edoardo Amaldi’. The school had published a circular on the school website about the summer vacations which contained the exact vacation dates of the school staff.
Link: link
Related articles:  Art. 5 GDPR, Art. 6 GDPR, Art. 9 GDPR, Art. 2-ter Codice della privacy, Art. 2-sexies Codice della privacy, Art. 2-septies (8) Codice della privacy
Type: Insufficient legal basis for data processing
Fine: EUR 4,000
Sector Public Sector and Education

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law