Italy

Municipality of Ventasso

8,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-05-14.

Rank · Sector

#209

of 385 in Public Sector and Education

Rank · Italy

#350

of 604

Rank · All fines

#1,597

of 3,170

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-05-14
Controller / Processor: Municipality of Ventasso
Sector: Public Sector and Education
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 9 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has imposed a fine of EUR 8,000 on the Municipality of Verntasso. The controller made personal data accessible to the public regarding a selection procedure for an administrative officer, including the list of candidates and details of the date, time and venue of the selection. As the post was reserved for disabled people the availability of the list also revealed health data.

Open original source Links to the regulator's original publication or another source.