Azienda socio sanitaria territoriale Melegnano e della Martesana
€3,500
Insufficient legal basis for data processing
Date de décision
10 février 2022
Autorité
Italian Data Protection Authority (Garante)
IT
Secteur
Health Care
Pays
IT
Droit
GDPRStatut
FINALDescription
The Italian DPA (Garante) has imposed a fine of EUR 3,500 on Azienda socio sanitaria territoriale Melegnano e della Martesana. The DPA initiated an investigation against the controller after it reported a data breach to the DPA. A patient had mistakenly received medical records and clinical documentation from another patient in his digital medical record.
Citations légales
Art. 5 (1)Art. 9
Questions et violations
Insufficient legal basis for data processing