Azienda socio sanitaria territoriale Melegnano e della Martesana
€3,500
Insufficient legal basis for data processing
決定日期
2022年2月10日
權限
Italian Data Protection Authority (Garante)
IT
部門
Health Care
國家
IT
法律
GDPR狀態
FINAL說明
The Italian DPA (Garante) has imposed a fine of EUR 3,500 on Azienda socio sanitaria territoriale Melegnano e della Martesana. The DPA initiated an investigation against the controller after it reported a data breach to the DPA. A patient had mistakenly received medical records and clinical documentation from another patient in his digital medical record.
法律引文
Art. 5 (1)Art. 9
問題與違規
Insufficient legal basis for data processing