Azienda Tutela della Salute della Sardegna: Insufficient legal basis for data processing

The Italian DPA has imposed a fine of EUR 5,000 on Azienda Tutela della Salute della Sardegna. The health authority had placed a sign at the gate of a physician's practice informing about their absence due to illness. During its investigation, the DPA found that there was no reason to disclose the physician's health information and that the health authority did not provide a valid legal basis for doing so.

GDPR Articles: Art. 5 GDPR, Art. 9 GDPR, Art. 2-septies Codice della privacy
Industry: Health Care