Doctor´s Office
€3,300
Insufficient legal basis for data processing
Datum der Entscheidung
1. Januar 2024
Behörde
Data Protection Authority of Hessen
DE
Sektor
Health Care
Land
DE
Recht
GDPRStatus
FINALBeschreibung
The DPA of Hessen has imposed a fine of EUR 3,300 on a doctor´s office. While responding to negative Google reviews, the controller revealed health data about the reviewers.
Juristische Zitate
Art. 5 (1)Art. 6 (1)Art. 9 (1)
Probleme und Verstöße
Insufficient legal basis for data processing