Physician
Not Available
Insufficient legal basis for data processing
Decision Date
January 1, 2021
Authority
Data Protection Authority of Brandenburg
DE
Sector
Health Care
Country
IT
Law
GDPRStatus
FINALDescription
The DPA of Brandenburg imposed a fine on a physician. The father of a minor patient had filed a complaint with the DPA because the physician had transmitted numerous data on his child to a central billing office. The data included information on the child's name, address, date of birth, health insurance number, medical services provided and diagnoses made. The physician had passed on the data without the parents' consent and thus without a valid legal basis.
Legal Citations
Art. 6Art. 9
Issues & Violations
Insufficient legal basis for data processing