Medical association

€3,000

Insufficient legal basis for data processing

Ημερομηνία απόφασης

9 Μαΐου 2024

Αρχή

Italian Data Protection Authority (Garante)

IT

Τομέας

Health Care

Χώρα

IT

Νόμος

GDPR

Κατάσταση

FINAL

Περιγραφή

The Italian DPA has imposed a fine of EUR 3,000 on a medical association. A doctor had filed a complaint because the professional association suspended them for not fulfilling the COVID-19 vaccination obligation and also informed their employer of this. An email from the association requesting notification of the employer was inadvertently sent to other individuals, as a result of which their email addresses and vaccination status became known.

Νομικές παραπομπές

Art. 5 (1)Art. 6Art. 2

Θέματα & Παραβάσεις

Insufficient legal basis for data processing

Μείνετε ενημερωμένοι για την επιβολή του απορρήτου

Σεβόμαστε την ιδιωτικότητά σας. Ένα email ανά μήνα, χωρίς spam, διαγραφή ανά πάσα στιγμή.