Enforcement
EN Società Lombarda Sport s.r.l.: Insufficient legal basis for data processing
€4,000 fine - Italian Data Protection Authority (Garante)
Content
The Italian DPA has fined Società Lombarda Sport s.r.l. EUR 4,000. An individual had filed a complaint with the DPA. The individual had undergone a sports fitness examination with the company for the purpose of attending sports courses. However, the company then had passed on the result of their examination without a valid legal basis.
GDPR Articles: Art. 5 GDPR, Art. 9 GDPR
Industry: Health Care