Azienda Usl Toscana Sud Est.
€20,000
Non-compliance with general data processing principles
Datum der Entscheidung
1. Juni 2023
Behörde
Italian Data Protection Authority (Garante)
IT
Sektor
Health Care
Land
IT
Recht
GDPRStatus
FINALBeschreibung
The Italian DPA has imposed a fine of EUR 20,000 against Azienda Usl Toscana Sud Est. The controller had put up an information poster in the emergency room showing a healthcare professional at a computer, on which an emergency protocol with the personal data (including health data) of a data subject was visible. In response to a request from the DPA, the healthcare provider explained that the publication of the data was due to mere inattention and that the poster had only been displayed for a few weeks.
Juristische Zitate
Art. 5 (1)Art. 9Art. 25 (1)Art. 2
Probleme und Verstöße
Non-compliance with general data processing principles