Azienda Tutela della Salute della Sardegna

€5,000

Insufficient legal basis for data processing

Decision Date

7 de junho de 2023

Authority

Italian Data Protection Authority (Garante)

IT

Sector

Health Care

Country

IT

Law

GDPR

Status

FINAL

Description

The Italian DPA has imposed a fine of EUR 5,000 on Azienda Tutela della Salute della Sardegna. The health authority had placed a sign at the gate of a physician's practice informing about their absence due to illness. During its investigation, the DPA found that there was no reason to disclose the physician's health information and that the health authority did not provide a valid legal basis for doing so.

Legal Citations

Art. 5Art. 9Art. 2

Issues & Violations

Insufficient legal basis for data processing

Stay Updated on Privacy Enforcement

We respect your privacy. One email per month, no spam, unsubscribe anytime.