Menzis (Health Insurance Company)
€50,000
Non-compliance with general data processing principles
Data della decisione
31 ottobre 2019
Autorità
Dutch Supervisory Authority for Data Protection (AP)
NL
Settore
Finance, Insurance and Consulting
Paese
NL
Legge
GDPRStato
FINALDescrizione
Marketing staff had access to patient data. Among other things, this violated the purpose limitation principle.
Citazioni legali
Art. 5
Problemi e violazioni
Non-compliance with general data processing principles