Azienda USL della Romagna
€120,000
Non-compliance with general data processing principles
Decision Date
27 de maio de 2021
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Health Care
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA (Garante) has fined Azienda Usl della Romagna EUR 120,000. The local health authority of Romagna had accidentally transmitted a patient's report regarding an abortion to a general practitioner. However, the patient had asked not to inform her general practitioner about it. The transmission of the report was made through the regional network 'Sole'. The investigation by Garante revealed that the data had been accidentally transmitted due to an error in the software that manages patient admissions, discharges and transfers.
Legal Citations
Art. 5 (1)Art. 9
Issues & Violations
Non-compliance with general data processing principles