INFORMÁTICA MÉDICA, S.L.
€60,000
Insufficient data processing agreement
Decision Date
November 7, 2022
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Health Care
Country
ES
Law
GDPRStatus
FINALDescription
The Spanish DPA has imposed a fine of EUR 60,000 on INFORMÁTICA MÉDICA, S.L.. The company acted as a processor for other companies and had engaged a subcontractor without, however, contractually regulating the relationship as required by Art. 28 GDPR.
Legal Citations
Art. 28
Issues & Violations
Insufficient data processing agreement