Medical care center
Nicht verfügbar
Insufficient legal basis for data processing
Datum der Entscheidung
1. Januar 2022
Behörde
Data Protection Authority of Bremen
DE
Sektor
Health Care
Land
DE
Recht
GDPRStatus
FINALBeschreibung
The DPA of Bremen has imposed a fine on a medical care center for having scanned a customer's ID card against their will and stored the copy. Once the customer complained, they were threatened with termination of the customer relationship. In assessing the fine, the DPA took into account the fact that the ID card had been scanned against the explicit objection of the data subject.
Probleme und Verstöße
Insufficient legal basis for data processing