Azienda Usl Toscana Sud Est.
€20,000
Non-compliance with general data processing principles
Dato for beslutning
1. juni 2023
Myndighet
Italian Data Protection Authority (Garante)
IT
Sektor
Health Care
Land
IT
Lov og rett
GDPRStatus
FINALBeskrivelse
The Italian DPA has imposed a fine of EUR 20,000 against Azienda Usl Toscana Sud Est. The controller had put up an information poster in the emergency room showing a healthcare professional at a computer, on which an emergency protocol with the personal data (including health data) of a data subject was visible. In response to a request from the DPA, the healthcare provider explained that the publication of the data was due to mere inattention and that the poster had only been displayed for a few weeks.
Juridiske henvisninger
Art. 5 (1)Art. 9Art. 25 (1)Art. 2
Problemer og overtredelser
Non-compliance with general data processing principles