Italy

San Pio Hospital in Benevento

6,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2025-01-16.

Rank · Sector

#119

of 213 in Employment

Rank · Italy

#345

of 543

Rank · All fines

#1,660

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2025-01-16
Controller / Processor: San Pio Hospital in Benevento
Sector: Employment
Quoted Articles: Art. 5 (1) a), c) GDPR, Art. 6 GDPR, Art. 9 (2) b) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 6,000 on the San Pio Hospital in Benevento. The controller did not ensure that only entitled employees had access to technical consultancy reports for employees, which include sensitive personal data about the affected employee.

Open original source Links to the regulator's original publication or another source.