Sanction RGPD Italian Data Protection Authority (Garante) — Italian Ministry of Defense : 10 k€ (2022)
- Autorité de contrôle
- Italian Data Protection Authority (Garante)
- Pays
- Italie
- Entreprise / secteur
- Italian Ministry of Defense
- Montant de l'amende
- 10 k€
- Date de la décision
- 28 avril 2022
- Fondement juridique
- Art. 5 (1) a), Art. 6, Art. 9, Art. 10, Art. 2-ter Codice della privacy, Art. 2-sexies Codice della privacy, Art. 2-octies Codice della privacy
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
The Italian DPA has imposed a fine of EUR 10,000 on the Italian Ministry of Defense. An employee of the ministry had filed a complaint with the DPA. During its investigation, the DPA found that two emails had been forwarded without authorization. These e-mails contained, among other things, sensitive information on the health status of the data subject as well as information on legal proceedings.