The Authority has imposed 75.000 € fine a region for failing to appoint a data processor to whom the institution had entrusted the management of health service bookings through the regional call centre (ReCUP).
This is one of the first measures for breach of Article 28 of the GDPR by a PA, which signals an increasing focus by the Authority on verifying formal compliance with the GDPR.
