Doctor´s Office
€3,300
Insufficient legal basis for data processing
Otsuse kuupäev
1. jaanuar 2024
Ametiasutus
Data Protection Authority of Hessen
DE
Sektor
Health Care
Riik
DE
Seadus
GDPRStaatus
FINALKirjeldus
The DPA of Hessen has imposed a fine of EUR 3,300 on a doctor´s office. While responding to negative Google reviews, the controller revealed health data about the reviewers.
Õiguslikud viited
Art. 5 (1)Art. 6 (1)Art. 9 (1)
Probleemid ja rikkumised
Insufficient legal basis for data processing