HOSPITAL RECOLETAS PONFERRADA, S.L.
€16,000
Insufficient legal basis for data processing
Fecha de la decisión
15 de diciembre de 2022
Autoridad
Spanish Data Protection Authority (aepd)
ES
Sector
Health Care
País
ES
Ley
GDPREstado
FINALDescripción
The Spanish DPA has imposed a fine on the healthcare facility HOSPITAL RECOLETAS PONFERRADA, S.L.. A patient had filed a complaint with the DPA. The patient had filled out a consent form during a medical examination in which certain items were already pre-ticked. The DPA also found that the controller had not complied with the patient's request for access to their personal data in a timely manner. The original fine of EUR 20,000 was reduced to EUR 16,000 due to voluntary payment.
Citas legales
Art. 6 (1)Art. 15
Problemas e infracciones
Insufficient legal basis for data processing