Due to the transmission of two emails containing personal data to unauthorized third parties, the Italian DPA fined the Ministry of Defense € 10,000.
The Italian Data Protection Authority received a complaint from an employee of the Italian Ministry of Defense. The basis for this was the unauthorized release of two emails containing personal data documents;
- In the first instance, an internal report on the investigation of a selection procedure included a copy of an e-mail from the Direzione Generale del Personale Militare to the Competition Commission.
A request for a medical opinion, details on the diagnosis, and a request for the person’s medical examination were all included.
- In the second, the military unit SDI Battalion South delivered an e-mail from the Registry of the Military Court of Naples to unauthorized military personnel, which contained a plea from the Public Prosecutor’s Office regarding a criminal penalty given against the complainant.
Read the official decision from the Garante here → (In Italian)