Italy

Camedi s.r.l.

10,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2023-06-01.

Rank · Sector

#138

of 270 in Health Care

Rank · Italy

#290

of 543

Rank · All fines

#1,400

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2023-06-01
Controller / Processor: Camedi s.r.l.
Sector: Health Care
Quoted Articles: Art. 5 GDPR, Art. 9 GDPR, Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Italian DPA has imposed a fine of EUR 10,000 on Camedi s.r.l. Medical Center. A person had filed a complaint with the DPA because they had received invoices as well as appointment reminders from another patient with the same name as theirs.

Open original source Links to the regulator's original publication or another source.