Enforcement · Italian Data Protection Authority (Garante) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Dr. Guzzo: Insufficient legal basis for data processing
The Italian Data Protection Authority (Garante) fined Dr.
Status Not cited by any decision here yet
Summary
Guzzo €5,000 for processing personal data without a sufficient legal basis. The violation concerned healthcare data and involved breaches of Article 5(1)(a), (b), and (c), as well as Article 9 of the GDPR. The authority found that the data controller failed to establish a valid lawful basis, ensure data minimization, and justify the processing of special category health data.
We hold a reference to this item, not its text.
enforcementtracker.com Read at the sourceHow it connects
References
Related across sources
439360 French Conseil d'État strikes down GendNotes police app decree for excessive special data In February 2020 the French minister of the interior enacted the Decree No. 2020-151 of 20 February 2020 authorising the automated processing of personal data known as "mobile… CE Apr 13, 2021 Storage Limitation Personal Data Retention Period
W137 2334258-1/5E Federal Administrative Court · BVwG - W137 2334258-1/5E XXXX as the party lodged a complaint at the Austrian DPA (District Hospital XXXX as the co-party) on the unauthorised sharing of her personal data in seven different instances by… Sep 7, 2026 Legitimate Interest Personal Data Integrity and Confidentiality Principle
W292 2292202-1 The data subject is in the military The unit he is employed at (controller) and the data subject are involved in a multitude of legal disputes concerning his employment, disciplinary proceedings, data protection… BVwG - W292 2292202-1 ·Federal Administrative Court Jun 30, 2026 Health Data Integrity and Confidentiality Principle Healthcare
C-136/17 GC and Others v CNIL C-136/17 (GC and Others) CJEU Sep 24, 2019 Right to be Forgotten Child Consent Right to Object
C-252/21 Meta Platforms v noyb C-252/21 (Meta Platforms (noyb)) CJEU Jan 12, 2023 Supervision IP Address Integrity and Confidentiality Principle