Ministero dell’Interno - Questura di Livorno – Reprimand (Italy, 2024)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Ministero dell’Interno in Italy shared personal information about an employee's firearms license without a proper legal reason. This matters because it shows that even government agencies must follow rules about handling personal data. The decision emphasizes the importance of transparency and legality in data processing.
What happened
The Ministero dell’Interno communicated personal data about an employee's firearms license to another ministry without a valid legal basis.
Who was affected
The employee of the Ministry of Infrastructure and Transport, whose personal data was shared without consent.
What the authority found
The Garante found that the Ministero dell’Interno processed personal data without a legal basis, violating GDPR's principles of lawfulness and transparency.
Why this matters
This case highlights that all organizations, including public ones, must have a valid reason to process personal data. It sets a precedent for ensuring that personal information is handled legally and transparently.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Automated check recorded — 18 October 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
A data subject, an employee from the Ministry of Infrastructure and Transport, submitted a complaint claiming an alleged violation of protection of his personal data by the Ministry of Infrastructure. As part of the preliminary investigation into the complaint, it emerged that a request made by the manager of the Ministry with a view to ascertaining if the "the data subject was in possession of a license to carry a pistol or a rifle and, if so, for what use" and whether the data subject "had ever been notified of any administrative measure or warning relating to the aforementioned license", The Interior Ministry (the controller) communicated to the Ministry information concerning the data subject's ownership of a firearms license for target shooting and his possession of firearms. The same communication also provided information on the circumstance that the data subject, after having been invited to undergo a medical examination at the local health unit in order to ascertain the psychophysical requirements prescribed by a national decree, had sold his weapons to an armoury and returned his firearms licence to the Police Headquarters. The controller also claimed that the information regarding the invitation to undergo a medical examination, the surrender of a firearms licence and the transfer of firearms were shared in a perspective of due 'cooperation' between public administrations following Article 6(1)(e) GDPR. The DPA held that the controller processed personal data without a legal basis and considered that there was a violation of Article 5(1)(a) and 6 GDPR as the controller did not comply with the principle of "lawfulness, fairness and transparency". It was considered that the data was not manifestly made public by the data subject, as contained in Article 9 (2)(e) GDPR and even in situations when the employee spontaneously shares personal information concerning him with acquaintances or colleagues, this cannot legitimise the absence of a suitable legal ba
Outcome
Reprimand
A formal reprimand: the DPA found a violation and issued a formal censure.
Related Enforcement Actions (0)
No other enforcement actions found for Ministero dell’Interno - Questura di Livorno in IT
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Ministero dell’Interno - Questura di Livorno - Italy (2024). Retrieved from cookiefines.eu
Last updated: