HOSPITAL RECOLETAS PONFERRADA, S.L.
€16,000
Insufficient legal basis for data processing
Date de décision
15 décembre 2022
Autorité
Spanish Data Protection Authority (aepd)
ES
Secteur
Health Care
Pays
ES
Droit
GDPRStatut
FINALDescription
The Spanish DPA has imposed a fine on the healthcare facility HOSPITAL RECOLETAS PONFERRADA, S.L.. A patient had filed a complaint with the DPA. The patient had filled out a consent form during a medical examination in which certain items were already pre-ticked. The DPA also found that the controller had not complied with the patient's request for access to their personal data in a timely manner. The original fine of EUR 20,000 was reduced to EUR 16,000 due to voluntary payment.
Citations légales
Art. 6 (1)Art. 15
Questions et violations
Insufficient legal basis for data processing