Consiglio Nazionale del Notariato (National Council of Notaries)
GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-10-07.
Case details
- Authority
- Italian Data Protection Authority (Garante)
- Date
- 2026-10-07
- Controller / Processor
- Consiglio Nazionale del Notariato (National Council of Notaries)
- Sector
- Public Sector and Education
- Quoted Articles
- Art. 5 (1) a) GDPR, Art. 6 (1) c), e) GDPR, Art. 6 (2), (3) GDPR
- Type of violation
- Insufficient legal basis for data processing
Summary
The Italian DPA has imposed a fine of EUR 15,000 on the Consiglio Nazionale del Notariato. The National Council of Notaries requested a list of all candidates who had been admitted to the oral examination of the notary examination procedure from a notary who was on the examination commission. The shared file contained personal data, as well as personal comments and annotations on some candidates' exam performance. The file was subsequently uploaded to the Council's newsletter, thereby making it accessible to notarial offices. Reduced versions of the list were uploaded after the first one. The Garante found no legal basis for the processing that took place.