Primary Health Care in the Capital Area
€34,300
Insufficient legal basis for data processing
Határozat dátuma
2025. február 17.
Hatóság
Icelandic data protection authority ('Persónuvernd')
IS
Szektor
Health Care
Ország
IS
Törvény
GDPRÁllapot
FINALLeírás
The Icelandic DPA has imposed a fine of EUR 34,300 on the Primary Health Care in the Capital Area. The controller processed personal and health data in shared medical record systems by merging its medical records with those of other parties and granting them access to its patients' records.
Jogi hivatkozások
Art. 5 (1)Art. 6 (1)Art. 9 (2)
Kérdések és jogsértések
Insufficient legal basis for data processing