Doctor
€14,000
Insufficient legal basis for data processing
Date de décision
1 janvier 2019
Autorité
Cypriot Data Protection Commissioner
CY
Secteur
Health Care
Pays
CY
Droit
GDPRStatut
FINALDescription
A patient complained to the Commissioner that the request for access to her medical file was not satisfied by the hospital because the dossier could not be identified/located by the controller. After investigating the case, an administrative fine of €5,000 was imposed on the hospital.
Citations légales
Art. 5
Questions et violations
Insufficient legal basis for data processing