Clinic owner
€10,000
Insufficient legal basis for data processing
Otsuse kuupäev
5. juuli 2024
Ametiasutus
Spanish Data Protection Authority (aepd)
ES
Sektor
Health Care
Riik
ES
Seadus
GDPRStaatus
FINALKirjeldus
The Spanish DPA has fined the owner of a plastic surgery clinic EUR 10,000. The controller posted before-and-after pictures of an individual who had undergone surgery at the clinic on social media (Facebook and Instagram) without obtaining the individual’s consent.
Õiguslikud viited
Art. 6 (1)Art. 9
Probleemid ja rikkumised
Insufficient legal basis for data processing