Azienda Sanitaria Locale Frosinone
€7,500
Insufficient fulfilment of information obligations
Dato for beslutning
13. januar 2022
Myndighet
Italian Data Protection Authority (Garante)
IT
Sektor
Health Care
Land
IT
Lov og rett
GDPRStatus
FINALBeskrivelse
The Italian DPA has fined Azienda Sanitaria Locale Frosinone EUR 7,500. In the course of its investigation against the medical facility, the Garante found that their privacy policy showed significant deficiencies. For example, the facility had indicated several purposes for processing the data, but the relevant legal bases for doing so were not always indicated. Those legal bases that were stated were often incorrect or contradictory. In addition, the facility did not provide sufficient information on the storage periods of the collected data.
Juridiske henvisninger
Art. 5 (1)Art. 12Art. 13
Problemer og overtredelser
Insufficient fulfilment of information obligations