Italy

Enna Provincial Health Authority

20,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-06-18.

Rank · Sector

#108

of 281 in Health Care

Rank · Italy

#219

of 573

Rank · All fines

#1,131

of 3,106

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-06-18
Controller / Processor: Enna Provincial Health Authority
Sector: Health Care
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 10 GDPR, Art. 12 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has imposed a fine of EUR 20,000 on the Enna Provincial Health Authority. The controller published the data subject's judicial records on its website. Following a notification from the data subject's lawyer the controller removed only some of the data subject's personal data, meaning it remained partly accessible to the public. It was only after a second request that the personal data was fully removed.

Open original source Links to the regulator's original publication or another source.