San Pio Hospital in Benevento: Insufficient legal basis for data processing

The Italian DPA has imposed a fine of EUR 6,000 on the San Pio Hospital in Benevento. The controller did not ensure that only entitled employees had access to technical consultancy reports for employees, which include sensitive personal data about the affected employee.

GDPR Articles: Art. 5 (1) a), c) GDPR, Art. 6 GDPR, Art. 9 (2) b) GDPR
Industry: Employment