Ophthalmologic institute
€7,000
Non-compliance with general data processing principles
Fecha de la decisión
26 de octubre de 2023
Autoridad
Spanish Data Protection Authority (aepd)
ES
Sector
Health Care
País
ES
Ley
GDPREstado
FINALDescripción
The Spanish DPA has imposed a fine of EUR 7,000 on a ophthalmologic institute. The controller had responded to an online review, disclosing personal data of a patient.
Citas legales
Art. 5 (1)Art. 32
Problemas e infracciones
Non-compliance with general data processing principles