Sanction RGPD Italian Data Protection Authority (Garante) — Ministero della Cultura : 12 k€ (2026)

Autorité de contrôle
Italian Data Protection Authority (Garante)
Pays
Italie
Entreprise / secteur
Ministero della Cultura
Montant de l'amende
12 k€
Date de la décision
29 janvier 2026
Fondement juridique
Art. 5 (1) a), Art. 6, Art. 12 (1), Art. 13, Art. 35, Art. 88 (1)
Manquement
Non-respect des principes de traitement

Résumé des faits

The Italian DPA has imposed a fine of EUR 12,000 on the Ministero della Cultura. The controller, who is operating the Archaeological Museum of Campobasso, used video surveillance in the museum, with the purpose of protecting the museums assets. But the controller also used the footage for disciplinary purposes against employees. Additionally the controller failed to adequatly inform data subjects regarding the processing.

Décision officielle

Italian Data Protection Authority (Garante)

Évaluer votre conformité RGPD avec Data Comply One