Azienda Usl di Bologna
€18,000
Non-compliance with general data processing principles
Decision Date
14 de janeiro de 2021
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Health Care
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA (Garante) fined Azienda Usl di Bologna EUR 18,000. In a hospital operated by the controller, 49 patients in the oncology ward received discharge letters with detailed pharmacological therapy information that originated from other patients. Fourteen of these patients had already accessed this incorrect documentation before it was corrected. The breakdown had occurred due to a manual error by a technician.
Legal Citations
Art. 5 (1)Art. 9
Issues & Violations
Non-compliance with general data processing principles