Camedi s.r.l.
€10,000
Insufficient technical and organisational measures to ensure information security
Decision Date
1 de junho de 2023
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Health Care
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA has imposed a fine of EUR 10,000 on Camedi s.r.l. Medical Center. A person had filed a complaint with the DPA because they had received invoices as well as appointment reminders from another patient with the same name as theirs.
Legal Citations
Art. 5Art. 9Art. 32
Issues & Violations
Insufficient technical and organisational measures to ensure information security