Primary Health Care in the Capital Area
€34,300
Insufficient legal basis for data processing
Fecha de la decisión
17 de febrero de 2025
Autoridad
Icelandic data protection authority ('Persónuvernd')
IS
Sector
Health Care
País
IS
Ley
GDPREstado
FINALDescripción
The Icelandic DPA has imposed a fine of EUR 34,300 on the Primary Health Care in the Capital Area. The controller processed personal and health data in shared medical record systems by merging its medical records with those of other parties and granting them access to its patients' records.
Citas legales
Art. 5 (1)Art. 6 (1)Art. 9 (2)
Problemas e infracciones
Insufficient legal basis for data processing