- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Azienda Ospedaliera Universitaria Careggi – €6,000 Fine (Italy, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Azienda Ospedaliera Universitaria Careggi was fined EUR 6,000 for mistakenly sending a patient's health documents to the wrong person. This data breach occurred due to a printing error, which the hospital reported to the data protection authority. This incident underscores the importance of careful data handling in healthcare settings.
What happened
The hospital was fined for sending health documents to the wrong patient due to a printing mistake.
Who was affected
Patients whose health data was incorrectly sent to another individual.
What the authority found
The authority ruled that the hospital violated data protection rules by mishandling sensitive health information.
Why this matters
This case serves as a reminder for healthcare providers to implement strict data handling procedures to prevent breaches and protect patient privacy.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 14 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Italian DPA (Garante) has imposed a fine of EUR 6,000 on Azienda Ospedaliera Universitaria Careggi for a breach of Art. 5 GDPR and Art. 9 GDPR. Azienda Ospedaliera Universitaria Careggi had notified the DPA of a data breach under Art. 33 GDPR regarding the transfer of health data to the wrong person. Medical documents of a patient had been sent by mail both to the affected patient and to another patient. The controller states that the incident occurred due to an error in the printing process. The ward where the affected patient was treated was only equipped with two printers, and one doctor had unknowingly also taken a colleague's print job (the affected patient's documents) when taking out his print job (the documents of the wrong recipient).
Related Enforcement Actions (0)
No other enforcement actions found for Azienda Ospedaliera Universitaria Careggi in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
25 February 2021
Authority
Garante per la protezione dei dati personali
Fine Amount
€6,000
About this data
Cite as: Cookie Fines. Azienda Ospedaliera Universitaria Careggi - Italy (2021). Retrieved from cookiefines.eu
Last updated: