# Poliambulatorio Radiologico 'il Sorriso' S.r.l.: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2022-11-10
- Original: https://www.enforcementtracker.com/ETid-1631
- Canonical: https://overview.legal/posts/47746
- Topics: Personal Data, Controllers, Healthcare, IP Address, Supervisory Authorities, Processing Agreement, Processing, Data Controller, Law Enforcement

## Summary

The Italian DPA has imposed a fine of EUR 15,000 on Poliambulatorio Radiologico 'il Sorriso' S.r.l.. A patient had filed a complaint with the DPA for not receiving sufficient information regarding the processing of their personal data. Among other things, the controller had not provided information about the data protection officer and the type of data being processed. The DPA also found that the controller had failed to provide the contact details of their data protection officer to the DPA.

## Full text

The Italian DPA has imposed a fine of EUR 15,000 on Poliambulatorio Radiologico 'il Sorriso' S.r.l.. A patient had filed a complaint with the DPA for not receiving sufficient information regarding the processing of their personal data. Among other things, the controller had not provided information about the data protection officer and the type of data being processed. The DPA also found that the controller had failed to provide the contact details of their data protection officer to the DPA.

GDPR Articles: Art. 5 GDPR, Art. 13 GDPR, Art. 37 GDPR
Industry: Health Care

---
Generated by overview.legal · https://overview.legal/posts/47746 · 2026-08-22