Covid-19 test center
€16,400
Insufficient legal basis for data processing
결정 날짜
2022년 1월 1일
권한
Data Protection Authority of Hessen
DE
섹터
Health Care
국가
DE
법률
GDPR상태
FINAL설명
The DPA of Hessen has fined a Covid-19 test center EUR 16,400. The controller had sent an e-mail containing personal data to several recipients in an open distribution list. The DPA also found that the controller had failed to adequately document the data breach.
법적 인용
Art. 6 (1)Art. 33 (1)
문제 및 위반 사항
Insufficient legal basis for data processing