# Azienda Usl Toscana centro: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2023-09-28
- Original: https://www.enforcementtracker.com/ETid-2108
- Canonical: https://overview.legal/posts/48223
- Topics: Health Data, Healthcare, Healthcare, IP Address, Processing Agreement, Processing, Supervisory Authorities

## Summary

The Italian DPA has imposed a fine of EUR 50,000 on Azienda Usl Toscana centro. A person had reported that medical records containing sensitive patient data were still being stored in one of the healthcare facility's former and vacant buildings which were publicly accessible.

## Full text

The Italian DPA has imposed a fine of EUR 50,000 on Azienda Usl Toscana centro. A person had reported that medical records containing sensitive patient data were still being stored in one of the healthcare facility's former and vacant buildings which were publicly accessible.

GDPR Articles: Art. 5 (1) a), e), f) GDPR, Art. 32 GDPR
Industry: Health Care

---
Generated by overview.legal · https://overview.legal/posts/48223 · 2026-08-22