Italy

Azienda Usl di Bologna

18,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2021-01-14.

Rank · Sector

#106

of 270 in Health Care

Rank · Italy

#213

of 543

Rank · All fines

#1,127

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2021-01-14
Controller / Processor: Azienda Usl di Bologna
Sector: Health Care
Quoted Articles: Art. 5 (1) f) GDPR, Art. 9 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA (Garante) fined Azienda Usl di Bologna EUR 18,000. In a hospital operated by the controller, 49 patients in the oncology ward received discharge letters with detailed pharmacological therapy information that originated from other patients. Fourteen of these patients had already accessed this incorrect documentation before it was corrected. The breakdown had occurred due to a manual error by a technician.

Open original source Links to the regulator's original publication or another source.