Doctor´s Office
€3,700
Insufficient legal basis for data processing
تاريخ القرار
1 يناير 2024
الهيئة
Data Protection Authority of Hessen
DE
القطاع
Health Care
البلد
DE
القانون
GDPRالحالة
FINALالوصف
The DPA of Hessen has imposed a fine of EUR 3,700 on a doctor´s office. While responding to negative Google reviews, the controller revealed health data about the reviewers.
الاستشهادات القانونية
Art. 5 (1)Art. 6 (1)Art. 9 (1)
القضايا والانتهاكات
Insufficient legal basis for data processing