- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Bolzano municipality – €30,000 Fine (Italy, 2023)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Bolzano municipality was fined EUR 30,000 for a data breach involving unauthorized access to patient health records. The Italian DPA found that the municipality failed to implement proper security measures to protect sensitive health information. This ruling stresses the importance of safeguarding personal data, especially in healthcare.
What happened
Bolzano municipality reported a data breach that allowed unauthorized access to patient health records due to inadequate security measures.
Who was affected
Patients whose health records were accessed without authorization.
What the authority found
The DPA determined that the municipality did not take appropriate technical and organizational measures to prevent the data breach.
Why this matters
This decision highlights the responsibility of municipalities and organizations to ensure robust data protection practices. It serves as a warning for all entities handling sensitive data to enhance their security protocols.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 13 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Italian DPA has imposed a fine of EUR 30,000 on Bolzano municipality. The Bolzano health authority had reported a data breach to the DPA involving unauthorized access to the health records of a number of patients, which was caused by a deficiency in the electronic health record service that the municipality had delegated to a processor. During its investigation, the DPA found that although the leak occurred at the processor's site, the municipality should have taken appropriate technical and organizational measures to ensure that such incidents would be avoided.
Related Enforcement Actions (0)
No other enforcement actions found for Bolzano municipality in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
23 March 2023
Authority
Garante per la protezione dei dati personali
Fine Amount
€30,000
About this data
Cite as: Cookie Fines. Bolzano municipality - Italy (2023). Retrieved from cookiefines.eu
Last updated: