Italy

Menarini Silicon Biosystems SpA

21,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2025-05-21.

Rank · Sector

#94

of 270 in Health Care

Rank · Italy

#178

of 543

Rank · All fines

#1,016

of 3,051

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2025-05-21
Controller / Processor: Menarini Silicon Biosystems SpA
Sector: Health Care
Quoted Articles: Art. 5 (1) a), e), (2) GDPR, Art. 13 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has imposed a fine of EUR 21,000 on Menarini Silicon Biosystems SpA. The controller is conducting oncological research and has developed a software that is able to classify human cells. The controller used pseudonymised health data from an American company which is part of the same group. The controller failed to ensure, that data subjects received adequate information and to ensure adequate data storage limitation. The controller also failed to demonstrate compliance with the general data processing principles.

Open original source Links to the regulator's original publication or another source.