# Bologna University Hospital IRCCS: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2026-07-23
- Original: https://www.enforcementtracker.com/ETid-3273
- Canonical: https://overview.legal/posts/354278

## Summary

Art. 5 GDPR, Art. 6 GDPR, Art. 9 GDPR · Sector: Health Care · Decided 2026-07-23

## Full text

Italian Data Protection Authority (Garante) fined Bologna University Hospital IRCCS €10,000 on 2026-07-23 for: Insufficient legal basis for data processing.
GDPR Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 9 GDPR
Sector: Health Care
Country: Italy
Source: https://www.gpdp.it/web/guest/home/docweb/-/docweb-display/docweb/10287326

---
Generated by overview.legal · https://overview.legal/posts/354278 · 2026-09-24