Private Polyclinic and Diagnostic Centre of Pyle Axiou
€30,000
Non-compliance with general data processing principles
Date de décision
3 août 2022
Autorité
Hellenic Data Protection Authority (HDPA)
GR
Secteur
Health Care
Pays
GR
Droit
GDPRStatut
FINALDescription
The Hellenic DPA has fined Private Polyclinic and Diagnostic Centre of Pyle Axiou EUR 30,000. A patient had requested access to data from an imaging examination. Due to lack of availability of the images, the clinic could not grant the request for access. The DPA found that the clinic had failed to provide adequate storage facilities for the images and thus violated Art. 5 (1) f) GDPR.
Citations légales
Art. 5 (1)
Questions et violations
Non-compliance with general data processing principles