Italy

Azienda Tutela della Salute della Sardegna

5,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2023-06-07.

Rank · Sector

#185

of 269 in Health Care

Rank · Italy

#366

of 543

Rank · All fines

#1,788

of 3,039

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2023-06-07
Controller / Processor: Azienda Tutela della Salute della Sardegna
Sector: Health Care
Quoted Articles: Art. 5 GDPR, Art. 9 GDPR, Art. 2-septies Codice della privacy
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 5,000 on Azienda Tutela della Salute della Sardegna. The health authority had placed a sign at the gate of a physician's practice informing about their absence due to illness. During its investigation, the DPA found that there was no reason to disclose the physician's health information and that the health authority did not provide a valid legal basis for doing so.

Open original source Links to the regulator's original publication or another source.