# Consiglio Nazionale del Notariato (National Council of Notaries): Insufficient legal basis for data processing

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2026-10-07
- Original: https://www.enforcementtracker.com/ETid-3394
- Canonical: https://overview.legal/posts/607204
- Topics: Personal Data, Controllers, Processing, Public Authority, Supervisory Authorities

## Summary

The Italian Data Protection Authority (Garante) fined the Consiglio Nazionale del Notariato (National Council of Notaries) €15,000 for lacking a sufficient legal basis for its data processing activities. The Garante found that the organization's processing of personal data violated GDPR Articles 5(1)(a) and 6, as it failed to establish a valid legal basis under the applicable provisions. The authority imposed the monetary penalty to address the deficiencies in the controller's legal grounding for processing operations within the public sector.

## Full text

Italian Data Protection Authority (Garante) fined Consiglio Nazionale del Notariato (National Council of Notaries) €15,000 on 2026-10-07 for: Insufficient legal basis for data processing.
GDPR Articles: Art. 5 (1) a) GDPR, Art. 6 (1) c), e) GDPR, Art. 6 (2), (3) GDPR
Sector: Public Sector and Education
Country: Italy
Source: https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/10311438

## Cited law provisions (6)

### GDPR — gdpr-art-5-par-1-en

Personal data shall be:

### GDPR — gdpr-art-5-par-1-pnt-a-en

processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’);

### GDPR — gdpr-art-6-par-1-en

Processing shall be lawful only if and to the extent that at least one of the following applies:

### GDPR — gdpr-art-6-par-2-en

Member States may maintain or introduce more specific provisions to adapt the application of the rules of this Regulation with regard to processing for compliance with points (c) and (e) of paragraph 1 by determining more precisely specific requirements for the processing and other measures to ensure lawful and fair processing including for other specific processing situations as provided for in Chapter IX.

### GDPR — gdpr-art-5-en

Principles relating to processing of personal data

### GDPR — gdpr-art-6-en

Lawfulness of processing

---
Generated by overview.legal · https://overview.legal/posts/607204 · 2026-11-14