Details:

Summary The Italian DPA has imposed a fine of EUR 15,000 on Poliambulatorio Radiologico ‘il Sorriso’ S.r.l.. A patient had filed a complaint with the DPA for not receiving sufficient information regarding the processing of their personal data. Among other things, the controller had not provided information about the data protection officer and the type of data being processed. The DPA also found that the controller had failed to provide the contact details of their data protection officer to the DPA.
Link: link
Related articles:  Art. 5 GDPR, Art. 13 GDPR, Art. 37 GDPR
Type: Non-compliance with general data processing principles
Fine: EUR 15,000
Sector Health Care

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law