Details:

Summary The Italian DPA has imposed a fine of EUR 5,000 on Azienda Tutela della Salute della Sardegna. The health authority had placed a sign at the gate of a physician’s practice informing about their absence due to illness. During its investigation, the DPA found that there was no reason to disclose the physician’s health information and that the health authority did not provide a valid legal basis for doing so.
Link: link
Related articles:  Art. 5 GDPR, Art. 9 GDPR, Art. 2-septies Codice della privacy
Type: Insufficient legal basis for data processing
Fine: EUR 5,000
Sector Health Care

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law