Clinic owner
€10,000
Insufficient legal basis for data processing
Päätöspäivä
5. heinäkuuta 2024
Viranomainen
Spanish Data Protection Authority (aepd)
ES
Ala
Health Care
Maa
ES
Laki
GDPRTila
FINALKuvaus
The Spanish DPA has fined the owner of a plastic surgery clinic EUR 10,000. The controller posted before-and-after pictures of an individual who had undergone surgery at the clinic on social media (Facebook and Instagram) without obtaining the individual’s consent.
Oikeudelliset viittaukset
Art. 6 (1)Art. 9
Asiat ja rikkomukset
Insufficient legal basis for data processing