Azienda Usl Toscana Sud Est.
€20,000
Non-compliance with general data processing principles
Datum odločitve
1. junij 2023
Organ
Italian Data Protection Authority (Garante)
IT
Sektor
Health Care
Država
IT
Zakon
GDPRStatus
FINALOpis
The Italian DPA has imposed a fine of EUR 20,000 against Azienda Usl Toscana Sud Est. The controller had put up an information poster in the emergency room showing a healthcare professional at a computer, on which an emergency protocol with the personal data (including health data) of a data subject was visible. In response to a request from the DPA, the healthcare provider explained that the publication of the data was due to mere inattention and that the poster had only been displayed for a few weeks.
Pravne navedbe
Art. 5 (1)Art. 9Art. 25 (1)Art. 2
Vprašanja in kršitve
Non-compliance with general data processing principles