Enforcement
EN Medical association: Insufficient fulfilment of data subjects rights
€4,000 fine - Italian Data Protection Authority (Garante)
Content
The Italian DPA has imposed a fine of EUR 4,000 on the medical association 'Ordine dei Medici Chirurghi e degli Odontoiatri'. A patient had filed a complaint with the DPA. During its investigation the DPA fount that the controller had not responded to the data subject's request for access to their personal data in a timely manner. Additionally, the controller failed to provide sufficient information regarding the retention period of their personal data.
GDPR Articles: Art. 12 (3) GDPR, Art. 13 (2) a) GDPR, Art. 15 GDPR
Industry: Health Care