Italy

Cooperativa Sociale Quadrifoglio

20,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2025-04-29.

Rank · Sector

#102

of 270 in Health Care

Rank · Italy

#211

of 543

Rank · All fines

#1,104

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2025-04-29
Controller / Processor: Cooperativa Sociale Quadrifoglio
Sector: Health Care
Quoted Articles: Art. 28 (3) GDPR, Art. 32 (1) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Italian DPA has imposed a fine of EUR 20,000 on Cooperativa Sociale Quadrifoglio. The entity that was fined, acting as a data processor, forwarded files containing the personal and health data of children. There was no legal basis for this, and it happened due to insufficient technical and organisational measures to ensure data security.

Open original source Links to the regulator's original publication or another source.