Primary Health Care in the Capital Area
€34,300
Insufficient legal basis for data processing
決定日
2025年2月17日
権威
Icelandic data protection authority ('Persónuvernd')
IS
セクター
Health Care
国名
IS
法律
GDPRステータス
FINAL説明
The Icelandic DPA has imposed a fine of EUR 34,300 on the Primary Health Care in the Capital Area. The controller processed personal and health data in shared medical record systems by merging its medical records with those of other parties and granting them access to its patients' records.
法的引用
Art. 5 (1)Art. 6 (1)Art. 9 (2)
問題と違反
Insufficient legal basis for data processing