Sanction RGPD Italian Data Protection Authority (Garante) — Azienda Usl della Romagna : 120 k€ (2021)
- Autorité de contrôle
- Italian Data Protection Authority (Garante)
- Pays
- Italie
- Entreprise / secteur
- Azienda Usl della Romagna
- Montant de l'amende
- 120 k€
- Date de la décision
- 27 mai 2021
- Fondement juridique
- Art. 5 (1) f), Art. 9
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Italian DPA (Garante) has fined Azienda Usl della Romagna EUR 120,000. The local health authority of Romagna had accidentally transmitted a patient's report regarding an abortion to a general practitioner. However, the patient had asked not to inform her general practitioner about it. The transmission of the report was made through the regional network 'Sole'. The investigation by Garante revealed that the data had been accidentally transmitted due to an error in the software that manages patient admissions, discharges and transfers.