- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Region of Tuscany – €10,000 Fine (Italy, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Region of Tuscany was fined for mistakenly publishing personal data of over 3,500 job applicants. This breach occurred when a URL was shared that allowed public access to sensitive information. The fine serves as a warning about the risks of mishandling personal data in public recruitment.
What happened
The Region of Tuscany published a URL that exposed personal data of 3,548 applicants for administrative assistant positions.
Who was affected
Job applicants for administrative assistant positions were affected by the data breach.
What the authority found
The Garante determined that the Region violated GDPR by failing to protect personal data from unauthorized access.
Why this matters
This case underscores the importance of data protection in public sector recruitment. Organizations must implement strict controls to safeguard personal information.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 14 March 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Italian DPA has imposed a fine of EUR 10,000 on the Region of Tuscany. The region had notified the DPA of a data breach pursuant to Art. 33 GDPR. The region stated that it had inadvertently published personal data of 3,548 applicants for administrative assistant positions. The data concerned information that the applicants had shared as part of a pre-selection test for the application. The region had mistakenly published a URL through which personal data and the results of the test could be viewed.
Related Enforcement Actions (1)
Other enforcement actions involving Region of Tuscany in IT
Details
Fine Date
10 February 2022
Authority
Garante per la protezione dei dati personali
Fine Amount
€10,000
About this data
Cite as: Cookie Fines. Region of Tuscany - Italy (2022). Retrieved from cookiefines.eu
Last updated: