HOSPITAL RECOLETAS PONFERRADA, S.L.
€16,000
Insufficient legal basis for data processing
Decision Date
December 15, 2022
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Health Care
Country
ES
Law
GDPRStatus
FINALDescription
The Spanish DPA has imposed a fine on the healthcare facility HOSPITAL RECOLETAS PONFERRADA, S.L.. A patient had filed a complaint with the DPA. The patient had filled out a consent form during a medical examination in which certain items were already pre-ticked. The DPA also found that the controller had not complied with the patient's request for access to their personal data in a timely manner. The original fine of EUR 20,000 was reduced to EUR 16,000 due to voluntary payment.
Legal Citations
Art. 6 (1)Art. 15
Issues & Violations
Insufficient legal basis for data processing