Pharmacy owner
€10,000
Non-compliance with general data processing principles
Fecha de la decisión
24 de noviembre de 2023
Autoridad
Spanish Data Protection Authority (aepd)
ES
Sector
Health Care
País
ES
Ley
GDPREstado
FINALDescripción
The Spanish DPA has imposed a fine of EUR 10,000 on a pharmacy owner. The controller had disposed of a large number of personal documents, including medical information of data subjects, in public trash containers that were accessible to other people.
Citas legales
Art. 5 (1)Art. 32
Problemas e infracciones
Non-compliance with general data processing principles