- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Asl Napoli 3 Sud – €30,000 Fine (Italy, 2023)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Asl Napoli 3 Sud was fined EUR 30,000 for not protecting patient data during a ransomware attack. The healthcare facility failed to implement proper security measures, which led to a breach affecting 842,000 patients and employees. This case highlights the importance of strong data protection practices in healthcare.
What happened
Asl Napoli 3 Sud was fined for failing to install adequate security measures to protect personal data during a ransomware attack.
Who was affected
842,000 patients and employees whose health data was compromised in the ransomware attack.
What the authority found
The Garante DPA ruled that Asl Napoli 3 Sud did not take necessary steps to safeguard personal data, violating GDPR requirements.
Why this matters
This ruling emphasizes that healthcare providers must prioritize data security to protect sensitive information. Other organizations should review their security protocols to avoid similar penalties.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 13 March 2026.
Processing notes: date discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Italian DPA has fined Asl Napoli 3 Sud EUR 30,000. The healthcare facility had suffered a ransomware attack that used a virus to restrict access to the healthcare facility's database and demanded a ransom to restore the functionality of its systems. During its investigation, the Garante DPA found that the controller had failed to install adequate technical and organizational measures to protect personal data. The incident affected data (including health data) of 842,000 patients and employees.
Related Enforcement Actions (0)
No other enforcement actions found for Asl Napoli 3 Sud in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
28 September 2023
Authority
Garante per la protezione dei dati personali
Fine Amount
€30,000
About this data
Cite as: Cookie Fines. Asl Napoli 3 Sud - Italy (2023). Retrieved from cookiefines.eu
Last updated: