Azienda socio sanitaria territoriale Melegnano e della Martesana
€3,500
Insufficient legal basis for data processing
Decision Date
February 10, 2022
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Health Care
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA (Garante) has imposed a fine of EUR 3,500 on Azienda socio sanitaria territoriale Melegnano e della Martesana. The DPA initiated an investigation against the controller after it reported a data breach to the DPA. A patient had mistakenly received medical records and clinical documentation from another patient in his digital medical record.
Legal Citations
Art. 5 (1)Art. 9
Issues & Violations
Insufficient legal basis for data processing