Support Centre

Italy: Garante fines Liceo Artistico Statale di Napoli €4,000 for GDPR violations

The Italian data protection authority ('Garante') announced, on 6 March 2020, that it had published in its monthly newsletter ('the Newsletter') a decision ('the Decision') fining the Liceo Artistico Statale di Napoli ('the High School') €4,000 for violating Articles 5(1)(a) and (c), 6(1)(c) and (e), and 9 of the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR'). In particular, the Decision highlights that the High School unlawfully published unnecessary information and health data in the teachers' rankings, published on the institute's website. In addition, the Decision finds that the publication was carried out in violation of the principles of lawfulness, fairness and transparency, as well as data minimisation. 

You can read the Newsletter here and the Decision here, both only available in Italian.