Enforcing jurisdiction
Italy · Geography does not establish applicable law.
Confirmed applicable legislation

Italian Ministry of Defense – €10,000 Fine (Italy, 2022)

€10,000Garante per la protezione dei dati personali28 April 2022Italy
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

The Italian DPA fined the Italian Ministry of Defense €10,000 for forwarding emails without permission. These emails included sensitive health information about a person. This case highlights the importance of handling personal data carefully and respecting privacy rights.

What happened

The Italian Ministry of Defense forwarded emails containing sensitive health information without authorization.

Who was affected

An employee of the Ministry of Defense whose health information was included in the forwarded emails.

What the authority found

The DPA ruled that the Ministry violated GDPR by not having a valid legal basis for processing personal data.

Why this matters

This decision emphasizes the need for organizations to secure proper consent before sharing personal information. It serves as a reminder for all companies to review their data handling practices.

Recorded legal citations
Automatically processed
Art. 2-octies Codice della privacy GDPR
Art. 2-sexies Codice della privacy GDPR
Art. 2-ter Codice della privacy GDPR
Art. 6 GDPR
Art. 9 GDPR
Art. 10 GDPR
Art. 5(1)(a) GDPR
View original scraped data
Art. 5(1) a) GDPR
Art. 6(GDPR)
Art. 9(GDPR)
Art. 10(GDPR)
Art. 2-ter Codice della privacy
Art. 2-sexies Codice della privacy
Art. 2-octies Codice della privacy

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 14 March 2026.

Processing notes: articles corrected, national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Italian DPA has imposed a fine of EUR 10,000 on the Italian Ministry of Defense. An employee of the ministry had filed a complaint with the DPA. During its investigation, the DPA found that two emails had been forwarded without authorization. These e-mails contained, among other things, sensitive information on the health status of the data subject as well as information on legal proceedings.

Related Enforcement Actions (0)

No other enforcement actions found for Italian Ministry of Defense in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

28 April 2022

Authority

Garante per la protezione dei dati personali

Fine Amount

€10,000

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Italian Ministry of Defense - Italy (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: