giustizia.it

Context

giustizia.it is the website of Italy’s Ministry of Justice. It is built on the standard government theme. The capture shows 35 requests to three domains: the site itself, the ministry’s own news portal and the national analytics platform. The ministry itself is correctly named as the data controller. The capture, like the whole series, was taken on a clean Edge browser with no VPN and no blocker. This is a clean result — and, pleasingly, exemplary in exactly those details where other sites in the series erred.

Who receives the data

Spotted here was: Web Analytics Italia (government-run, Italy). There are no third-party commercial recipients in this session.

Was there a consent banner

There is a cookie notice on the site. Government anonymous analytics is equated to technical means and requires no consent, so its firing is not in itself a violation. The embedded video, if it occurs on other pages, is declared in privacy mode and with consent. I will only note that the analytics measurement carries the visitor identifier, so the «anonymity» here, as on other government sites, comes with a slight caveat.

The declared matches the fact

The main merit of this site is the accuracy of the document. The policy names the Web Analytics Italia government analytics directly and correctly describes how it works. YouTube is described separately and carefully: it is stated that the video is embedded via the privacy domain youtube-nocookie.com and that consent is requested for third-party cookies. In the capture without consent the video did not activate. And, importantly, there is no session-recording module here — the very one that appeared in the series on the sites of the tax authority, the cybersecurity agency and even the government. The declared and the observed coincide.

Done right where others erred

The contrast is worth emphasising. The embedded video here is set up exactly as it should be: privacy mode plus consent. And this is precisely what the Court of Cassation — an institution of the same judicial system — did wrong, placing a regular YouTube embedding without a mention in the policy. And the session recording replicated across a number of government platforms is also absent here. That is, the ministry got right exactly the details on which others stumbled.

What cannot be claimed from the capture

A few honest caveats. The behaviour of the embedded video after consent I do not observe — in this session it did not launch; but in the document it is declared in privacy mode, which in itself is the right choice. On the IP masking in the analytics I judge from its default configuration; the visitor identifier, meanwhile, is visible in the capture. The analytics is government-run, so the question of the servers’ geography does not arise. The capture covers the home page.

Conclusion

A clean and exemplary result. The only analytics service is named and correctly described, the embedded video is set up in privacy mode and behind consent, there is no hidden session-recording module, nothing leaves the country. Against the backdrop of the related site of the same judicial system, where the video was connected in the regular way and without a mention, here one can see how the same tasks are solved correctly. The main takeaway for the reader: this is how a tidy government site should look — the declared tools are named, privacy modes are chosen where they exist, and reality does not diverge from the document.