Italian Ministry of Defense – €10,000 Fine (Italy, 2022)

€10,000Garante per la protezione dei dati personali28 April 2022Italy
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Italian Ministry of Defense was fined €10,000 for forwarding emails without permission. These emails contained sensitive health information and details about legal proceedings. This case highlights the importance of handling personal data carefully, especially when it involves sensitive information.

What happened

The Ministry of Defense forwarded emails containing sensitive health and legal information without authorization.

Who was affected

An employee of the Ministry of Defense whose sensitive health and legal information was shared without permission.

What the authority found

The Italian DPA found that the Ministry of Defense violated GDPR by processing sensitive data without a valid legal basis.

Why this matters

This case underscores the need for government bodies to adhere strictly to data protection rules, especially when dealing with sensitive information. It serves as a reminder that even public institutions are accountable under GDPR.

GDPR Articles Cited

Art. 2-octies Codice della privacy GDPR
Art. 2-sexies Codice della privacy GDPR
Art. 2-ter Codice della privacy GDPR
Art. 6 GDPR
Art. 9 GDPR
Art. 10 GDPR
Art. 5(1)(a) GDPR
Full Legal Summary
Detailed

The Italian DPA has imposed a fine of EUR 10,000 on the Italian Ministry of Defense. An employee of the ministry had filed a complaint with the DPA. During its investigation, the DPA found that two emails had been forwarded without authorization. These e-mails contained, among other things, sensitive information on the health status of the data subject as well as information on legal proceedings.

Related Enforcement Actions (0)

No other enforcement actions found for Italian Ministry of Defense in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

28 April 2022

Authority

Garante per la protezione dei dati personali

Fine Amount

€10,000

Enforcement Tracker ID

ETid-1196

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Italian Ministry of Defense - Italy (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: