Sanction RGPD Italian Data Protection Authority (Garante) — Cluster S.r.l. : 18 k€ (2023)
- Autorité de contrôle
- Italian Data Protection Authority (Garante)
- Pays
- Italie
- Entreprise / secteur
- Cluster S.r.l.
- Montant de l'amende
- 18 k€
- Date de la décision
- 16 novembre 2023
- Fondement juridique
- Art. 5, Art. 32
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Italian DPA imposed a fine of EUR 18,000 on Cluster S-r.l. A data subject had complained to the DPA because their son's health-related data and their own personal data had been published on the internet. The controller had organized a medical training event at which documents containing personal data of the data subject and their deceased son were forwarded to the participants without sufficient anonymization. Some documents were later published on the internet by a third party.