Covid-19 test center
€16,400
Insufficient legal basis for data processing
Datum der Entscheidung
1. Januar 2022
Behörde
Data Protection Authority of Hessen
DE
Sektor
Health Care
Land
DE
Recht
GDPRStatus
FINALBeschreibung
The DPA of Hessen has fined a Covid-19 test center EUR 16,400. The controller had sent an e-mail containing personal data to several recipients in an open distribution list. The DPA also found that the controller had failed to adequately document the data breach.
Juristische Zitate
Art. 6 (1)Art. 33 (1)
Probleme und Verstöße
Insufficient legal basis for data processing