# Azienda sanitaria locale Roma 3: Insufficient fulfilment of data breach notification obligations

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2024-03-21
- Original: https://www.enforcementtracker.com/ETid-2289
- Canonical: https://overview.legal/posts/48404
- Topics: Notification Obligation, Data Breaches, Notified Body Reporting and Notification Obligations, Article 19 GDPR - Notification of Rectification, Erasure or Restriction, Healthcare, Processing Agreement, Supervisory Authorities

## Summary

The Italian DPA has fined Azienda sanitaria locale Roma 3 EUR 10,000 for failing to report a data breach to the DPA in a timely manner and to properly document the data breach.

## Full text

The Italian DPA has fined Azienda sanitaria locale Roma 3 EUR 10,000 for failing to report a data breach to the DPA in a timely manner and to properly document the data breach.

GDPR Articles: Art. 33 (1), (2), (5) GDPR
Industry: Health Care

---
Generated by overview.legal · https://overview.legal/posts/48404 · 2026-08-22