Private individual
€600
Insufficient legal basis for data processing
決定日
2020年10月19日
権威
Austrian Data Protection Authority (dsb)
AT
セクター
Individuals and Private Associations
国名
ES
法律
GDPRステータス
FINAL説明
Between February and June 2020, a private individual published information about patients on his personal Facebook page. The information included health data in terms of Art. 4 (15) GDPR. In detail, the published data comprised patient names, diagnostic findings, medical diagnoses, medication data, data on hospital admissions and discharges, patients' social security numbers and the names of the treating physicians.
法的引用
Art. 5 (1)Art. 9
問題と違反
Insufficient legal basis for data processing