Sanction RGPD Italian Data Protection Authority (Garante) — Istituti ospedalieri bergamaschi : 45 k€ (2021)
- Autorité de contrôle
- Italian Data Protection Authority (Garante)
- Pays
- Italie
- Entreprise / secteur
- Istituti ospedalieri bergamaschi
- Montant de l'amende
- 45 k€
- Date de la décision
- 11 février 2021
- Fondement juridique
- Art. 5 (1) a), f), Art. 9, Art. 32
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
The Italian DPA (Garante) has imposed a fine of EUR 45,000 on Istituti ospedalieri bergamaschi. The DPA initiated an investigation against the controller after it reported a data breach to the DPA. A patient had mistakenly received medical records and clinical documentation from seven other patients in his digital medical record.