Italy

Azienda Ospedale-Università Padova

5,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2023-01-11.

Rank · Sector

#185

of 270 in Health Care

Rank · Italy

#363

of 543

Rank · All fines

#1,786

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2023-01-11
Controller / Processor: Azienda Ospedale-Università Padova
Sector: Health Care
Quoted Articles: Art. 5 (1) f) GDPR, Art. 9 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has imposed a fine of EUR 5,000 on Azienda Ospedale-Università Padova. The controller had sent an email containing consent forms for participation in a clinical trial to several recipients in an open distribution list. This allowed the recipients to view the email addresses of all other recipients, 19 in total.

Open original source Links to the regulator's original publication or another source.