Private Polyclinic and Diagnostic Centre of Pyle Axiou
€30,000
Non-compliance with general data processing principles
Fecha de la decisión
3 de agosto de 2022
Autoridad
Hellenic Data Protection Authority (HDPA)
GR
Sector
Health Care
País
GR
Ley
GDPREstado
FINALDescripción
The Hellenic DPA has fined Private Polyclinic and Diagnostic Centre of Pyle Axiou EUR 30,000. A patient had requested access to data from an imaging examination. Due to lack of availability of the images, the clinic could not grant the request for access. The DPA found that the clinic had failed to provide adequate storage facilities for the images and thus violated Art. 5 (1) f) GDPR.
Citas legales
Art. 5 (1)
Problemas e infracciones
Non-compliance with general data processing principles