Istituto Nazionale di Previdenza Sociale – €20,000 Fine (Italy, 2024)

€20,000Garante per la protezione dei dati personali11 April 2024Italy
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Italy's data protection authority fined the Italian National Institute of Social Security (INPS) EUR 20,000 for posting personal information online without permission. This matters because it shows that organizations must have a valid reason to share personal data. Small businesses should ensure they have proper legal grounds before publishing any personal information.

What happened

INPS published personal data of participants in a selection process on its website without a valid legal basis.

Who was affected

Individuals whose personal data was published by INPS without their consent.

What the authority found

The authority found that INPS lacked a valid legal basis for processing personal data, violating GDPR's requirements.

Why this matters

This case highlights the importance of having proper legal grounds for sharing personal data. Companies should review their data-sharing practices to avoid similar penalties.

GDPR Articles Cited

AI-verified

Art. 2-ter Codice della privacy GDPR
Art. 5(GDPR)
Art. 6(GDPR)
View original scraped data
Art. 5(GDPR)
Art. 6(GDPR)
Art. 2-ter Codice della privacy

Original data from scraper before AI verification against source document.

Source verified 13 March 2026
articles corrected
national law identified
Full Legal Summary
Detailed

The Italian DPA has imposed a fine of EUR 20,000 on the Italian National Institute of Social Security (INPS). The controller had published personal data of participants in a competitive selection procedure on its website without an appropriate legal basis.

Related Enforcement Actions (0)

No other enforcement actions found for Istituto Nazionale di Previdenza Sociale in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

11 April 2024

Authority

Garante per la protezione dei dati personali

Fine Amount

€20,000

Enforcement Tracker ID

ETid-2382

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Istituto Nazionale di Previdenza Sociale - Italy (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: