Italy

Medical association

4,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2024-06-20.

Rank · Sector

#198

of 270 in Health Care

Rank · Italy

#401

of 543

Rank · All fines

#1,933

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2024-06-20
Controller / Processor: Medical association
Sector: Health Care
Quoted Articles: Art. 12 (3) GDPR, Art. 13 (2) a) GDPR, Art. 15 GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Italian DPA has imposed a fine of EUR 4,000 on the medical association "Ordine dei Medici Chirurghi e degli Odontoiatri". A patient had filed a complaint with the DPA. During its investigation the DPA fount that the controller had not responded to the data subject's request for access to their personal data in a timely manner. Additionally, the controller failed to provide sufficient information regarding the retention period of their personal data.

Open original source Links to the regulator's original publication or another source.