Menzis (Health Insurance Company)
€50,000
Non-compliance with general data processing principles
Decision Date
October 31, 2019
Authority
Dutch Supervisory Authority for Data Protection (AP)
NL
Sector
Finance, Insurance and Consulting
Country
NL
Law
GDPRStatus
FINALDescription
Marketing staff had access to patient data. Among other things, this violated the purpose limitation principle.
Legal Citations
Art. 5
Issues & Violations
Non-compliance with general data processing principles