- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Casa di Cura Città di Roma – €12,000 Fine (Italy, 2025)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Casa di Cura Città di Roma was fined €12,000 for mishandling patient data. The healthcare provider's software allowed access to more patient information than necessary, raising serious privacy concerns. This case serves as a reminder for healthcare providers to limit data access to what is strictly needed.
What happened
Casa di Cura Città di Roma used patient management software that provided excessive access to patient data.
Who was affected
Patients whose data was accessible through the healthcare provider's software.
What the authority found
The authority imposed a €12,000 fine for violations of GDPR related to data minimization and access control.
Why this matters
This case highlights the need for healthcare providers to implement strict data access controls. It reinforces the principle of data minimization, urging businesses to limit access to personal data.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 13 March 2026.
Processing notes: national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Italian DPA has imposed a fine of EUR 12,000 on the Casa di Cura Città di Roma. The controller used patient management software that gave users access to excessive amounts of patient data.
Related Enforcement Actions (0)
No other enforcement actions found for Casa di Cura Città di Roma in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
11 September 2025
Authority
Garante per la protezione dei dati personali
Fine Amount
€12,000
About this data
Cite as: Cookie Fines. Casa di Cura Città di Roma - Italy (2025). Retrieved from cookiefines.eu
Last updated: