Transparent Administration

Toscana Diagnostica has adopted an Organizational, Management, and Control Model in accordance with Legislative Decree 231/2001, which governs the administrative liability of entities arising from criminal offenses.

The Model 231 is the tool through which the company prevents the risk of crimes being committed in the interest of or for the benefit of the organization. It is a structured system that analyzes sensitive activities, identifies potential risks, and defines protocols for prevention, control, and reporting for each area at risk.

The main areas covered by the Model include crimes against the public administration, particularly in relations with regional health authorities and public institutions; corporate crimes, including conduct related to accounting and financial management; crimes related to occupational health and safety; cybercrimes and unlawful data processing; environmental offenses related to the management of medical waste and hazardous materials; and corruption offenses between private individuals and in commercial activities.

To oversee the Model, a Supervisory Body (OdV) has been established, endowed with autonomy, independence, and continuity of action, which monitors the Model’s operation and compliance, promotes its updating, and receives reports regarding possible violations. To report issues to the Supervisory Body: odv@toscanadiagnostica.it.

Toscana Diagnostica has adopted a Disciplinary System that defines the consequences for violations of the Code of Ethics, the 231 Organizational Model, and internal procedures.

The Disciplinary System applies to all individuals involved in the network’s activities—employees, managers, contractors, and partners—and is proportionate to the severity of the conduct, in full compliance with the safeguards provided by law and the relevant collective bargaining agreements. It is not a punitive tool: it is a guarantee.

It assures those who work with integrity that the rules apply to everyone. It assures patients that the organization has the tools to correct what is not working. It assures institutions that Toscana Diagnostica takes its responsibilities seriously.

Toscana Diagnostica employs a structured cybersecurity framework designed to protect personal and health data, information systems, digital infrastructure, and the operational continuity of the entire network.

In terms of data protection, we use encryption for sensitive data in transit and at rest, access policies based on the principle of least privilege (each user accesses only the information strictly necessary for their role), and secure authentication procedures for all systems on the network.

In terms of infrastructure security, our fully cloud-based information systems are protected by firewalls, intrusion detection systems, and continuous anomaly monitoring. Security updates are applied systematically and in a timely manner. Data backups, including our integrated disaster recovery system, are performed regularly and stored in separate, secure environments to ensure the ability to recover data even in the event of serious incidents.

Staff training is an essential component of our security strategy. All employees receive periodic training on cybersecurity best practices, recognizing the most common threats (phishing, social engineering, malware), and the procedures to follow in the event of a suspected breach. We have a cyber incident response plan that defines roles, responsibilities, and response times in the event of a data breach or system compromise, in accordance with the notification requirements set forth by the GDPR.