Azienda socio sanitaria territoriale Melegnano e della Martesana
€3,500
Insufficient legal basis for data processing
決定日
2022年2月10日
権威
Italian Data Protection Authority (Garante)
IT
セクター
Health Care
国名
IT
法律
GDPRステータス
FINAL説明
The Italian DPA (Garante) has imposed a fine of EUR 3,500 on Azienda socio sanitaria territoriale Melegnano e della Martesana. The DPA initiated an investigation against the controller after it reported a data breach to the DPA. A patient had mistakenly received medical records and clinical documentation from another patient in his digital medical record.
法的引用
Art. 5 (1)Art. 9
問題と違反
Insufficient legal basis for data processing