Italy

Ministero della Giustizia (Italian Ministry of Justice)

20,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-10-07.

Rank · Sector

#135

of 394 in Public Sector and Education

Rank · Italy

#238

of 623

Rank · All fines

#1,186

of 3,267

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-10-07
Controller / Processor: Ministero della Giustizia (Italian Ministry of Justice)
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a), c) GDPR, Art. 6 (1) c), e) GDPR, Art. 6 (2), (3) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 20,000 on the Italian Ministry of Justice. The Ministry supervises the public examination for the notary profession. On 18 February 2026, a list of results for a written exam was left on a table in front of the candidates. The list contained the names, dates of birth and other personal data of 1,229 candidates who had either failed or passed the exam. As the examination hall was not restricted to participants, the Garante concluded that leaving the list behind amounted to dissemination.

Open original source Links to the regulator's original publication or another source.