# I.S.P.R.O.: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2022-10-20
- Original: https://www.enforcementtracker.com/ETid-1528
- Canonical: https://overview.legal/posts/47643
- Topics: Healthcare, Health Data, Healthcare, IP Address, Processing Agreement, Processing, Supervisory Authorities

## Summary

The Italian DPA (Garante) has imposed a fine of EUR 7,000 on the oncology health care facility I.S.P.R.O.. An individual had mistakenly received medical records from another patient via e-mail.

## Full text

The Italian DPA (Garante) has imposed a fine of EUR 7,000 on the oncology health care facility I.S.P.R.O.. An individual had mistakenly received medical records from another patient via e-mail.

GDPR Articles: Art. 5 (1) f) GDPR, Art. 9 GDPR
Industry: Health Care

---
Generated by overview.legal · https://overview.legal/posts/47643 · 2026-08-22