Menzis (Health Insurance Company)
€50,000
Non-compliance with general data processing principles
Fecha de la decisión
31 de octubre de 2019
Autoridad
Dutch Supervisory Authority for Data Protection (AP)
NL
Sector
Finance, Insurance and Consulting
País
NL
Ley
GDPREstado
FINALDescripción
Marketing staff had access to patient data. Among other things, this violated the purpose limitation principle.
Citas legales
Art. 5
Problemas e infracciones
Non-compliance with general data processing principles