Italian Data Protection Authority (Garante) · 26 May 2022
Azienda sanitaria universitaria Friuli Occidentale
Insufficient technical and organisational measures to ensure information security
Fine€50,000Fine issued
- Regulator
- Italian Data Protection Authority (Garante)
- Decided
- 26 May 2022
- Country
- Italy
- Sector
- Health Care
- Regulator’s reference
- Not recorded
- Fino case number
- 2022/IT/076
What happened
The Italian DPA fined the website www.inelenco.com 50,000€. Among many GDPR infringements, this online telephone directory had no legal basis and processed and published the data of 357,046 data subjects without their knowledge and consent.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 9Processing of special categories of personal dataRead →
- Art. 25Data protection by design and by defaultRead →
- Art. 32Security of processingRead →
- Accountability
- Data security
- Special categories
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/IT/076.