Italy

Azienda Usl Toscana centro

50,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2023-09-28.

Rank · Sector

#69

of 270 in Health Care

Rank · Italy

#117

of 543

Rank · All fines

#733

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2023-09-28
Controller / Processor: Azienda Usl Toscana centro
Sector: Health Care
Quoted Articles: Art. 5 (1) a), e), f) GDPR, Art. 32 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has imposed a fine of EUR 50,000 on Azienda Usl Toscana centro. A person had reported that medical records containing sensitive patient data were still being stored in one of the healthcare facility's former and vacant buildings which were publicly accessible.

Open original source Links to the regulator's original publication or another source.