Italy
I.S.P.R.O.
7,000 €
GDPR enforcement action by Italian Data Protection Authority (Garante) on 2022-10-20.
Rank · Sector
#160
of 270 in Health Care
Rank · Italy
#323
of 543
Rank · All fines
#1,563
of 3,050
Case details
- Authority
- Italian Data Protection Authority (Garante)
- Date
- 2022-10-20
- Controller / Processor
- I.S.P.R.O.
- Sector
- Health Care
- Quoted Articles
- Art. 5 (1) f) GDPR, Art. 9 GDPR
- Type of violation
- Non-compliance with general data processing principles
Summary
The Italian DPA (Garante) has imposed a fine of EUR 7,000 on the oncology health care facility I.S.P.R.O.. An individual had mistakenly received medical records from another patient via e-mail.
Open original source
Links to the regulator's original publication or another source.
Related fines
Italy
2024-02-08
79,100,000 €
ETid-2306
Enel Energia SpA
Transportation and Energy
Italy
2026-03-26
31,800,000 €
ETid-3162
Intesa Sanpaolo S.p.A.
Finance, Insurance and Consulting
Italy
2020-01-15
27,800,000 €
ETid-189
TIM (telecommunications operator)
Media, Telecoms and Broadcasting
Italy
2022-02-10
20,000,000 €
ETid-1098
Clearview Al Inc.
Industry and Commerce
Italy
2020-07-13
16,700,000 €
ETid-336
Wind Tre S.p.A.
Media, Telecoms and Broadcasting
Italy
2024-11-02
15,000,000 €
ETid-2497
OpenAI OpCo LLC
Media, Telecoms and Broadcasting