Details:

Summary The Italian DPA (Garante) has imposed a fine of EUR 8,000 on the Health Protection Agency of Sardinia (ATS). A patient had mistakenly received medical records and clinical documentation from another patient in his own file.
Link: link
Related articles:  Art. 5 GDPR, Art. 9 GDPR
Type: Insufficient legal basis for data processing
Fine: EUR 8,000
Sector Health Care

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law