Enforcement
EN Azienda Usl della Romagna: Non-compliance with general data processing principles
€120,000 fine - Italian Data Protection Authority (Garante)
Content
The Italian DPA (Garante) has fined Azienda Usl della Romagna EUR 120,000. The local health authority of Romagna had accidentally transmitted a patient's report regarding an abortion to a general practitioner. However, the patient had asked not to inform her general practitioner about it. The transmission of the report was made through the regional network 'Sole'. The investigation by Garante revealed that the data had been accidentally transmitted due to an error in the software that manages patient admissions, discharges and transfers.
GDPR Articles: Art. 5 (1) f) GDPR, Art. 9 GDPR
Industry: Health Care