Details:

Summary The Italian DPA (Garante) fined ASL Latina EUR 10,000. The controller had mistakenly sent documents containing health data of the data subject to an uninvolved third party.
Link: link
Related articles:  Art. 5 (1) f) GDPR, Art. 6 GDPR, Art. 9 GDPR
Type: Insufficient legal basis for data processing
Fine: EUR 10,000
Sector Health Care

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law