# Azienda Ospedale-Università Padova: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2023-01-11
- Original: https://www.enforcementtracker.com/ETid-1755
- Canonical: https://overview.legal/posts/47870
- Topics: Healthcare, IP Address, Controllers, Processing Agreement, Consent, Processing, Data Controller, Supervisory Authorities

## Summary

The Italian DPA has imposed a fine of EUR 5,000 on Azienda Ospedale-Università Padova. The controller had sent an email containing consent forms for participation in a clinical trial to several recipients in an open distribution list. This allowed the recipients to view the email addresses of all other recipients, 19 in total.

## Full text

The Italian DPA has imposed a fine of EUR 5,000 on Azienda Ospedale-Università Padova. The controller had sent an email containing consent forms for participation in a clinical trial to several recipients in an open distribution list. This allowed the recipients to view the email addresses of all other recipients, 19 in total.

GDPR Articles: Art. 5 (1) f) GDPR, Art. 9 GDPR
Industry: Health Care

---
Generated by overview.legal · https://overview.legal/posts/47870 · 2026-08-22