Italy

Azienda Usl della Romagna

120,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2021-05-27.

Rank · Sector

#33

of 270 in Health Care

Rank · Italy

#68

of 543

Rank · All fines

#435

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2021-05-27
Controller / Processor: Azienda Usl della Romagna
Sector: Health Care
Quoted Articles: Art. 5 (1) f) GDPR, Art. 9 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA (Garante) has fined Azienda Usl della Romagna EUR 120,000. The local health authority of Romagna had accidentally transmitted a patient's report regarding an abortion to a general practitioner. However, the patient had asked not to inform her general practitioner about it. The transmission of the report was made through the regional network "Sole". The investigation by Garante revealed that the data had been accidentally transmitted due to an error in the software that manages patient admissions, discharges and transfers.

Open original source Links to the regulator's original publication or another source.