Italian Data Protection Authority: The "Exodus” Trojan Case –

12 aprile 2019

The "Exodus” Trojan Case – "Appalling”, said Antonello Soro'
(Ansa, 30 march 2019)

"What happened is appalling. The fact that hundreds of people having no connections whatsoever with criminal investigations have been intercepted because of a flaw in a Trojan used for those investigations is quite worrisome. More in-depth inquiries are necessary into this incident, and the Garante will also step in as appropriate.

The exact circumstances of the case have yet to be clarified and the chain of events must be brought to light. Nevertheless, what is unquestionable is that tools like these Trojans are quite dangerous: they can help investigations, but are also liable to give rise to unacceptable breaches of citizens' freedoms if they are deployed without the barest technical safeguards. We had drawn the Government's attention to these issues when we gave our opinion both on the draft legislative decree amending the interception laws – which also introduced regulations on the use of Trojans – and on the draft implementing decree that was supposed to lay down the appropriate safeguards in selecting the software for those purposes.

There is a lesson to be drawn from this case: we must be resolute in preventing similar breaches from occurring in future,  being aware that no mistakes may be allowed for in such a sensitive area – where investigational powers go hand in hand with no less strong technological applications. Investigational tools such as those at issue must be kept at the disposal of law enforcement bodies, as provided for by the law, but only if they are coupled with robust safeguards to protect citizens' freedom."

Retrieved from https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/9101790

Archivio news

 

News dello studio

ott15

15/10/2025

Parere all’Autorità garante della concorrenza e del mercato in merito allo schema di provvedimento relativo all’operazione di concentrazione C12726 – Poste Italiane / Telecom Italia

La delibera esprime parere adesivo, per i profili di competenza dell’Autorità, alle conclusioni dell’AGCM, riportate nello schema di provvedimento relativo al procedimento in

ott15

15/10/2025

Approvazione delle condizioni economiche dei nuovi servizi Internet of Things forniti nelle c.d. aree bianche (Listino "C&D") e dei servizi Wavelength forniti nelle c.d. aree grigie (Listino "Italia a 1 Giga") da Open Fiber S.p.A. beneficiario di aiuti di

Con la delibera n. 222/25/CONS, l' Agcom ha approvato, ai sensi delle delibere n. 120/16/CONS, n. 406/21/CONS, n. 420/22/CONS e n. 171/25/CONS e sulla base dei criteri di equità e ragionevolezza,

ott15

15/10/2025

Private videos - The Italian Data Protection Authority warns CamHub: no to the disclosure of images stolen from italians' homes

The collection and subsequent disclosure of videos unlawfully obtained from cameras located in private places in Italy is an infringement of European and national privacy regulations. The Italian

News Giuridiche

ott16

16/10/2025

Immobile senza agibilità: il compratore può rifiutare di pagare il saldo?

La mancanza del certificato di abitabilità

ott16

16/10/2025

Abusi su opere ante 1967 e stato legittimo dell’immobile

A chi spetta l’onere della prova? La sentenza

ott16

16/10/2025

Intelligenza artificiale e principio di legalità nella legge 132/2025

<p>Negli ultimi anni, l’innovazione