Fino

Garante per la protezione dei dati personali (Italy) · 23 January 2023

Azienda ULSS

About: Data principles, Data security, Special categories

Fine€5,000Violation found
Regulator
Garante per la protezione dei dati personali (Italy)
Decided
23 January 2023
Country
Italy
Sector
Not given
Regulator’s reference
9861289
Fino case number
2023/IT/102
Export as PDF

What happened

The Italian DPA fined a hospital €5.000 for mistakenly disclosing the data subject’s health data to an unauthorised third party in violation of Articles 5(1)(f), 9 and 32 GDPR.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

  • Data principles
  • Data security
  • Special categories

Sources

The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.

Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2023/IT/102.