Italy

Azienda Sanitaria Locale TO4

8,400 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2024-05-23.

Rank · Sector

#149

of 270 in Health Care

Rank · Italy

#309

of 543

Rank · All fines

#1,495

of 3,051

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2024-05-23
Controller / Processor: Azienda Sanitaria Locale TO4
Sector: Health Care
Quoted Articles: Art. 5 (1) f) GDPR, Art. 9 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has imposed a fine of EUR 8,400 on Azienda Sanitaria Locale TO4. The controller had sent an email containing information on medical treatment plans to several pacients in an open distribution list. This allowed the recipients to view the email addresses of all other recipients, 44 in total.

Open original source Links to the regulator's original publication or another source.