Azienda Sanitaria Provinciale di Palermo

Azienda Sanitaria Provinciale di Palermo (ASP Palermo) is the provincial health authority responsible for delivering healthcare services within the Province of Palermo, Italy. As a public health entity, it operates under the regional health system to provide medical, preventive, and administrative services to the resident population. The organisation’s core mandate encompasses the management of hospitals, outpatient clinics, and public health programs across the province. As a provincial health authority, it is subject to national and regional healthcare regulations, including compliance with the Italian Data Protection Authority and GDPR requirements for personal data protection. Its role encompasses both curative care and public health initiatives aimed at improving community health outcomes. The organisation’s institutional identity is reflected in its alias, which directly denotes its provincial health authority status.

In June 2025, ASP Palermo experienced a cyber security incident that compromised approximately 45 workstations, with the full scope of affected systems still under assessment at the time of reporting. The breach potentially exposed personal identifying information, contact details, and administrative data, though the specific individuals affected could not be immediately identified. In response, the organisation isolated the compromised machines, activated internal security and forensic procedures, and notified the Italian Data Protection Authority as required by GDPR. It also commenced cooperation with law enforcement authorities to investigate the attack. Because the exact data subjects could not be pinpointed, the authority issued a public communication serving as an alternative notification under GDPR provisions. ASP Palermo has publicly apologized for the breach and committed to maintaining transparency throughout the ongoing handling of the incident.