Italy
Health Protection Agency of Sardinia (ATS)
8,000 €
GDPR enforcement action by Italian Data Protection Authority (Garante) on 2021-10-14.
Rank · Sector
#151
of 270 in Health Care
Rank · Italy
#311
of 543
Rank · All fines
#1,507
of 3,050
Case details
- Authority
- Italian Data Protection Authority (Garante)
- Date
- 2021-10-14
- Controller / Processor
- Health Protection Agency of Sardinia (ATS)
- Sector
- Health Care
- Quoted Articles
- Art. 5 GDPR, Art. 9 GDPR
- Type of violation
- Insufficient legal basis for data processing
Summary
The Italian DPA (Garante) has imposed a fine of EUR 8,000 on the Health Protection Agency of Sardinia (ATS). A patient had mistakenly received medical records and clinical documentation from another patient in his own file.
Open original source
Links to the regulator's original publication or another source.
Related fines
Italy
2024-02-08
79,100,000 €
ETid-2306
Enel Energia SpA
Transportation and Energy
Italy
2026-03-26
31,800,000 €
ETid-3162
Intesa Sanpaolo S.p.A.
Finance, Insurance and Consulting
Italy
2020-01-15
27,800,000 €
ETid-189
TIM (telecommunications operator)
Media, Telecoms and Broadcasting
Italy
2022-02-10
20,000,000 €
ETid-1098
Clearview Al Inc.
Industry and Commerce
Italy
2020-07-13
16,700,000 €
ETid-336
Wind Tre S.p.A.
Media, Telecoms and Broadcasting
Italy
2024-11-02
15,000,000 €
ETid-2497
OpenAI OpCo LLC
Media, Telecoms and Broadcasting