Azienda USL della Romagna
€120,000
Non-compliance with general data processing principles
Date de décision
27 mai 2021
Autorité
Italian Data Protection Authority (Garante)
IT
Secteur
Health Care
Pays
IT
Droit
GDPRStatut
FINALDescription
The Italian DPA (Garante) has fined Azienda Usl della Romagna EUR 120,000. The local health authority of Romagna had accidentally transmitted a patient's report regarding an abortion to a general practitioner. However, the patient had asked not to inform her general practitioner about it. The transmission of the report was made through the regional network 'Sole'. The investigation by Garante revealed that the data had been accidentally transmitted due to an error in the software that manages patient admissions, discharges and transfers.
Citations légales
Art. 5 (1)Art. 9
Questions et violations
Non-compliance with general data processing principles