Italy

Municipality of Ventasso

8,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-05-14.

Rank · Sector

#202

of 362 in Public Sector and Education

Rank · Italy

#325

of 555

Rank · All fines

#1,555

of 3,085

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-05-14
Controller / Processor: Municipality of Ventasso
Sector: Public Sector and Education
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 9 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has imposed a fine of EUR 8,000 on the Municipality of Verntasso. The controller made personal data accessible to the public regarding a selection procedure for an administrative officer, including the list of candidates and details of the date, time and venue of the selection. As the post was reserved for disabled people the availability of the list also revealed health data.

Open original source Links to the regulator's original publication or another source.