Covid-19 test center
€16,400
Insufficient legal basis for data processing
Päätöspäivä
1. tammikuuta 2022
Viranomainen
Data Protection Authority of Hessen
DE
Ala
Health Care
Maa
DE
Laki
GDPRTila
FINALKuvaus
The DPA of Hessen has fined a Covid-19 test center EUR 16,400. The controller had sent an e-mail containing personal data to several recipients in an open distribution list. The DPA also found that the controller had failed to adequately document the data breach.
Oikeudelliset viittaukset
Art. 6 (1)Art. 33 (1)
Asiat ja rikkomukset
Insufficient legal basis for data processing