Details:

Summary The Italian DPA has imposed a fine of EUR 4,000 on the Università Agraria di Nettuno. A former employee of the university had filed a complaint with the DPA due to the fact that the university published a document that contained his personal data. The document revealed information relating to a legal dispute between the data subject and the university. During its investigation, the DPA found that in the absence of a valid legal basis, the publication was unlawful.
Link: link
Related articles:  Art. 5 GDPR, Art. 6 GDPR, Art. 2-ter Codice della privacy
Type: Insufficient legal basis for data processing
Fine: EUR 4,000
Sector Employment

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law