Azienda Ospedaliera Universitaria Integrata di Verona – Violation Found (Italy, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Italian hospital was allowed to collect and store patient data for research, but it must get specific consent from patients or approval from the authority for those who can't be contacted. This ruling is important because it emphasizes the need for clear consent in medical research. Hospitals and researchers should ensure they follow proper consent procedures.
What happened
Azienda Ospedaliera Universitaria Integrata di Verona was authorized to collect and store patient data for a research database under specific conditions.
Who was affected
Patients whose data is collected for the 'Torax' database were affected.
What the authority found
The authority ruled that the hospital must obtain specific consent or approval for processing data of patients who cannot be contacted, following initial consent.
Why this matters
This decision reinforces the importance of obtaining clear consent in medical research. Organizations involved in health data should implement robust consent processes to comply with regulations.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
National Law Articles
The Garante authorised the collection and storage of data in the 'Torax' database on the basis of an initial consent, expressed by patients when they took part in the study, provided that the hospital subsequently acquires specific consents from patients or the opinion of the Garante for those who have died or can no longer be contacted, as the research projects are further defined and approved by the territorially competent ethics committees. Favourable opinion of the Italian Garante on the processing of data by the Azienda Ospedaliera Universitaria Integrata di Verona aimed at studying patients suffering from neoplastic, infectious, degenerative and traumatic diseases of the thoracic district. The project envisages the creation of a database and research activities in nine areas that will be the subject of further specific protocols and submitted to the relevant ethics committees. In order to give the go-ahead the Authority required researchers to base the collection - and subsequent processing of health data for medical research purposes - on 'stepwise' consent.
Outcome
Violation Found
The DPA found a violation but did not impose a fine.
Related Enforcement Actions (0)
No other enforcement actions found for Azienda Ospedaliera Universitaria Integrata di Verona in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Decision Date
30 June 2022
Authority
Garante per la protezione dei dati personali
GDPRhub ID
gdprhub-5126About this data
Cite as: Cookie Fines. Azienda Ospedaliera Universitaria Integrata di Verona - Italy (2022). Retrieved from cookiefines.eu
Last updated: