Physician
€1,500
Non-compliance with general data processing principles
Decision Date
December 7, 2023
Authority
Cypriot Data Protection Commissioner
CY
Sector
Health Care
Country
IT
Law
GDPRStatus
FINALDescription
The Cypriot DPA has imposed a fine of EUR 1,500 on a physician. An individual had filed a complaint with the DPA because the physician had accessed their personal data in a healthcare system, even though the physician had not treated the individual or obtained their consent.
Legal Citations
Art. 5 (1)
Issues & Violations
Non-compliance with general data processing principles