Sanction RGPD Italian Data Protection Authority (Garante) — Ministero delle Imprese e del Made in Italy : 15 k€ (2026)
Le 26 février 2026, Italian Data Protection Authority (Garante) a prononcé une sanction RGPD de 15 k€ à l'encontre de Ministero delle Imprese e del Made in Italy (secteur : Secteur public et éducation), sur le fondement de Art. 5 (1) a), c), Art. 6, Art. 9, Art. 12, pour base légale insuffisante pour le traitement. Référence de décision : 10235715.
- Autorité de contrôle
- Italian Data Protection Authority (Garante)
- Pays
- Italie
- Entreprise / secteur
- Ministero delle Imprese e del Made in Italy
- Montant de l'amende
- 15 k€
- Date de la décision
- 26 février 2026
- Fondement juridique
- Art. 5 (1) a), c), Art. 6, Art. 9, Art. 12
- Manquement
- Base légale insuffisante pour le traitement
- Référence de décision
- 10235715
Résumé des faits
The Italian DPA has imposed a fine of EUR 15,000 on the Ministero delle Imprese e del Made in Italy. The controller started a 'Open competition, based on qualifications and examinations, to fill a total of 225 full-time, permanent non-managerial posts (...)' After the competition was closed, the ranking list of the candidates had still been effectivly online on the controllers website and could be accessed by web links. The ranking list included personal data of the candidates. The controller later took the list offline after a request to delete the data, but the list reappeared later on the website of a third party.