I.S.P.R.O.: Non-compliance with general data processing principles

€7,000 fine - Italian Data Protection Authority (Garante)

€7,000 Fine

I.S.P.R.O.

ITALY

Non-compliance with general data processing principles

Oct 20, 2022 Source

Content

The Italian DPA (Garante) has imposed a fine of EUR 7,000 on the oncology health care facility I.S.P.R.O.. An individual had mistakenly received medical records from another patient via e-mail.

GDPR Articles: Art. 5 (1) f) GDPR, Art. 9 GDPR
Industry: Health Care