DPA case 9296257 – Violation Found (Italy, 2020)

Violation Found
Garante per la protezione dei dati personali19 March 2020Italy
final
Violation Found

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Italian Ministry of Economics and Finance consulted on how to send electronic medical prescriptions. The authority confirmed that digital channels can be used, but they must follow health data protection rules. This is significant because it shows that digital solutions for healthcare must prioritize patient privacy.

What happened

The Ministry sought advice on how to transmit electronic medical prescriptions to patients.

Who was affected

Patients who will receive electronic medical prescriptions through digital channels.

What the authority found

The authority confirmed that digital channels for e-prescriptions can comply with health data protection rules.

Why this matters

This ruling emphasizes the importance of integrating privacy measures in digital healthcare solutions. It serves as a guide for future implementations of electronic health services.

GDPR Articles Cited
Automatically processed
View original scraped data
Art. 36(4) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

National Law Articles
AI-identified
Art. 156, comma 5 Codice Privacy

Source checks

Linked-source text retrieved.

Automated check recorded — 18 October 2026.

Processing notes: national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Italian economics and finance Ministry (“Mef”) consulted the Garante on the adoption of a decree defining the channels (e.g. SMS, e-mail) through which electronic medical prescriptions shall be transmitted to patients. Such decree does not specify the methods for releasing the e-prescriptions, which shall be referred to in a following decree to be adopted together with the Ministry of health prior consultation with the Garante. n/a The Garante confirmed the possibility of providing for digital channels through which deliver e-prescriptions in compliance with rules on health data protection. To this end, the Garante also reminded that technical and security measures shall be considered when specifying the releasing methods of the e-prescriptions (e.g. the prescription shall be attached to the e-mail and protected with encryption).

Outcome

Violation Found

The DPA found a violation but did not impose a fine.

Related Enforcement Actions (0)

No other enforcement actions found for DPA case 9296257 in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Decision Date

19 March 2020

Authority

Garante per la protezione dei dati personali

GDPRhub ID

gdprhub-2254

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. DPA case 9296257 - Italy (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: