Azienda Ospedale-Università Padova: Non-compliance with general data processing principles

€5,000 fine - Italian Data Protection Authority (Garante)

€5,000 Fine

Azienda Ospedale-Università Padova

ITALY

Non-compliance with general data processing principles

Jan 11, 2023 Source

Content

The Italian DPA has imposed a fine of EUR 5,000 on Azienda Ospedale-Università Padova. The controller had sent an email containing consent forms for participation in a clinical trial to several recipients in an open distribution list. This allowed the recipients to view the email addresses of all other recipients, 19 in total.

GDPR Articles: Art. 5 (1) f) GDPR, Art. 9 GDPR
Industry: Health Care