- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Informatica Alto Adige Spa – €10,000 Fine (Italy, 2023)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Informatica Alto Adige Spa was fined EUR 10,000 for not protecting patient health data properly. A breach occurred due to unauthorized access linked to their electronic health record system. This case highlights the importance of having strong security measures in place to protect sensitive information.
What happened
Informatica Alto Adige Spa failed to implement adequate security measures, leading to unauthorized access to patient health data.
Who was affected
Patients whose health data was accessed without authorization due to the company's security failures.
What the authority found
The Italian data protection authority found that Informatica Alto Adige Spa did not take appropriate technical and organizational measures to prevent data breaches.
Why this matters
This ruling emphasizes that companies must prioritize data security to avoid breaches. It serves as a warning to other businesses about the need for robust data protection practices.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 14 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Italian DPA has fined Informatica Alto Adige Spa EUR 10,000. The municipality of Bolzano had reported a data protection breach to the DPA involving unauthorized access to the health data of a number of patients caused by a deficiency in the electronic health record that the municipality had delegated to Informatica Alto Adige Spa. During its investigation, the DPA found that Alto Adige Spa had failed to take appropriate technical and organizational measures to prevent such incidents.
Related Enforcement Actions (0)
No other enforcement actions found for Informatica Alto Adige Spa in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
23 March 2023
Authority
Garante per la protezione dei dati personali
Fine Amount
€10,000
About this data
Cite as: Cookie Fines. Informatica Alto Adige Spa - Italy (2023). Retrieved from cookiefines.eu
Last updated: