Sanction RGPD Italian Data Protection Authority (Garante) — Medical association : 4 k€ (2024)
- Autorité de contrôle
- Italian Data Protection Authority (Garante)
- Pays
- Italie
- Entreprise / secteur
- Medical association
- Montant de l'amende
- 4 k€
- Date de la décision
- 20 juin 2024
- Fondement juridique
- Art. 12 (3), Art. 13 (2) a), Art. 15
- Manquement
- Droits des personnes non respectés
Résumé des faits
The Italian DPA has imposed a fine of EUR 4,000 on the medical association 'Ordine dei Medici Chirurghi e degli Odontoiatri'. A patient had filed a complaint with the DPA. During its investigation the DPA fount that the controller had not responded to the data subject's request for access to their personal data in a timely manner. Additionally, the controller failed to provide sufficient information regarding the retention period of their personal data.