Details:

Summary The Italian DPA has fined Società Lombarda Sport s.r.l. EUR 4,000. An individual had filed a complaint with the DPA. The individual had undergone a sports fitness examination with the company for the purpose of attending sports courses. However, the company then had passed on the result of their examination without a valid legal basis.
Link: link
Related articles:  Art. 5 GDPR, Art. 9 GDPR
Type: Insufficient legal basis for data processing
Fine: EUR 4,000
Sector Health Care

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law