The Data Protection Authority found out that personal data of several participants in a public competition had been disclosed online. This happened due to a configuration error, where a list of the codes assigned to all the candidates was publicly accessible on the platform for some time, which allowed unwarranted access to the participants’ personal data by other candidates. Scanshare violated the principle of protection of information security, despite being the data controller on behalf of “Azienda Ospedaliera di Rilievo Nazionale ‘Antonio Cardarelli” (private hospital), and was fined with EUR 60,000.
the data protection authority found out that personal data of several participants in a public competition had been disclosed online this happened due to a configuration error where a list of the codes assigned to all the candidates was publicly accessible on the platform for some time which allowed unwarranted access to the participants’ personal data by other candidates scanshare violated the principle of protection of information security despite being the data controller on behalf of “azienda ospedaliera di rilievo nazionale ‘antonio cardarelli” private hospital and was  with  
 data protection authority find   personal data  several participants   public competition   disclose online  happen due   configuration error   list   cod assign    candidates  publicly accessible   platform   time  allow unwarranted access   participants’ personal data   candidates scanshare violate  principle  protection  information security despite   data controller  behalf  “azienda ospedaliera di rilievo nazionale ‘antonio cardarelli” private hospital      