Azienda di Rilievo Nazionale ad Alta Specializzazione A.R.N.A.S. Civico - di Cristina Benfratelli (the controller) – €6,000 Fine (Italy, 2022)

€6,000Garante per la protezione dei dati personali1 December 2022Italy
final
ePrivacy
Fine

A hospital in Italy was fined EUR 6,000 for publishing a nurse's personal and health data on its website without consent. The data included sensitive information like the nurse's state of invalidity. This case highlights the importance of protecting personal data and ensuring it is not shared publicly without a valid reason.

What happened

The hospital published a nurse's personal and health data on its website without consent.

Who was affected

A nurse whose personal and health information was made public on the hospital's website.

What the authority found

The Italian authority found that the hospital violated GDPR by publishing sensitive personal data without a valid legal basis.

Why this matters

This case underscores the critical need for organizations to safeguard personal data and avoid unauthorized disclosures. Healthcare providers should be especially vigilant about protecting sensitive information.

GDPR Articles Cited

Art. 5 GDPR
Art. 6 GDPR
Art. 9 GDPR

National Law Articles

Article 2-septies (8) of the Codice in Materia di Protezione dei Dati Personali
Article 2-ter of the Codice in Materia di Protezione dei Dati Personali

Entities Involved

Azienda di Rilievo Nazionale ad Alta Specializzazione A.R.N.A.S. Civico - di Cristina Benfratelli (the controller)
XX (the data subject)
Italy enforcementGarante per la protezione dei dati personali actionsAll Azienda di Rilievo Nazionale ad Alta Specializzazione A.R.N.A.S. Civico - di Cristina Benfratelli (the controller) actions
Full Legal Summary
Detailed

The case involved the unauthorized publication of personal and health data on the hospital's website, not related to cookies or consent mechanisms.

Violations (1)

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Related Enforcement Actions (0)

No other enforcement actions found for Azienda di Rilievo Nazionale ad Alta Specializzazione A.R.N.A.S. Civico - di Cristina Benfratelli (the controller) in IT

This is the only recorded action for this entity in this jurisdiction.

Similar Cases

Enforcement actions with similar violations

Data Subject versus Telecommunications Company

2025 · DPA OLGKoblenz

Legal Person

2023 · Úřad pro ochranu osobních údajů

€4K

Ramona Films, S.L.

2022 · Agencia Española de Protección de Datos

€8K

CNIL

2019 · Court of Justice of the European Union

Minister for Legal Protection

2022 · DPA RbOverijssel

Details

Fine Date

1 December 2022

Authority

Garante per la protezione dei dati personali

Fine Amount

€6,000

GDPRhub ID

gdprhub-5589

Sources

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Azienda di Rilievo Nazionale ad Alta Specializzazione A.R.N.A.S. Civico - di Cristina Benfratelli (the controller) - Italy (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: