Details:
| Summary | The Italian DPA has imposed a fine of EUR 4,000 on the medical association ‘Ordine dei Medici Chirurghi e degli Odontoiatri’. A patient had filed a complaint with the DPA. During its investigation the DPA fount that the controller had not responded to the data subject’s request for access to their personal data in a timely manner. Additionally, the controller failed to provide sufficient information regarding the retention period of their personal data. |
| Link: | link |
| Related articles: | Art. 12 (3) GDPR, Art. 13 (2) a) GDPR, Art. 15 GDPR |
| Type: | Insufficient fulfilment of data subjects rights |
| Fine: | EUR 4,000 |
| Sector | Health Care |
All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/