Sanction RGPD Italian Data Protection Authority (Garante) — Azienda Ospedale-Università Padova : 5 k€ (2023)
- Autorité de contrôle
- Italian Data Protection Authority (Garante)
- Pays
- Italie
- Entreprise / secteur
- Azienda Ospedale-Università Padova
- Montant de l'amende
- 5 k€
- Date de la décision
- 11 janvier 2023
- Fondement juridique
- Art. 5 (1) f), Art. 9
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Italian DPA has imposed a fine of EUR 5,000 on Azienda Ospedale-Università Padova. The controller had sent an email containing consent forms for participation in a clinical trial to several recipients in an open distribution list. This allowed the recipients to view the email addresses of all other recipients, 19 in total.