- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Regione Lazio – €75,000 Fine (Italy, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Regione Lazio was fined €75,000 for not properly managing a company that handled healthcare service reservations. This matters because it shows the importance of having clear contracts with service providers to protect personal data. Companies must ensure they follow data protection rules to avoid penalties.
What happened
Regione Lazio failed to designate Capodarco as a data processor and did not have a proper contract for 20 years.
Who was affected
Patients whose healthcare data was managed by Capodarco were affected.
What the authority found
The Italian data protection authority ruled that Regione Lazio processed personal data unlawfully due to lack of a proper contract.
Why this matters
This case emphasizes the need for companies to have clear agreements with their service providers. It serves as a warning to others about the importance of compliance with data protection laws.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 12 March 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Italian DPA (Garante) has fined Regione Lazio (Lazio Region) EUR 75,000 for failing to designate Capodarco, the company it entrusted with the management of reservations for healthcare services in 1999, as a data processor. The controller had not entered into a contract with Capodarco that would have governed its role as data processor in accordance with the requirements of data protection law. Thus, a proper contract for commissioned processing had not been concluded until 2019, which meant that data had been processed unlawfully for a period of about 20 years.
Related Enforcement Actions (0)
No other enforcement actions found for Regione Lazio in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
14 January 2021
Authority
Garante per la protezione dei dati personali
Fine Amount
€75,000
About this data
Cite as: Cookie Fines. Regione Lazio - Italy (2021). Retrieved from cookiefines.eu
Last updated: