The Italian Data Protection Authority (GPDP) fined a high school in the Lombardy region of Italy 2,000 after an administrative staff member mistakenly published intermediate exam results, final exam scores, and detailed oral exam schedules containing student names on the school’s public website. The data was intended to be restricted to the secure, private electronic register. A female high school student filed a formal complaint regarding the public exposure of her classmates’ and her own data, which was subsequently removed by the school.