Azienda socio sanitaria territoriale nord Milano, C.F.
€40,000
Non-compliance with general data processing principles
Decision Date
7 de dezembro de 2023
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Health Care
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA has imposed a fine of EUR 40,000 on Azienda socio sanitaria territoriale nord Milano, C.F.. During its investigation, the DPA found that a patient's spouse had received their husband's COVID test report from an employee of the health authority without authorization.
Legal Citations
Art. 5 (1)Art. 9Art. 25Art. 32
Issues & Violations
Non-compliance with general data processing principles