Sanction RGPD Italian Data Protection Authority (Garante) — Azienda Ospedaliero Universitaria Senese : 50 k€ (2021)
- Autorité de contrôle
- Italian Data Protection Authority (Garante)
- Pays
- Italie
- Entreprise / secteur
- Azienda Ospedaliero Universitaria Senese
- Montant de l'amende
- 50 k€
- Date de la décision
- 27 janvier 2021
- Fondement juridique
- Art. 5 (1) f), Art. 9
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Italian DPA (Garante) fined Azienda Ospedaliero Universitaria Senese EUR 50,000. The controller, a hospital, had reported to the Italian DPA that a couple's medical report had been mistakenly sent to an uninvolved third party. The report contained information about a genetic consultation and the health status and sex life of the data subjects. The incident occurred due to an error in packaging the letter, according to a statement from the controller.