Private individual
€600
Insufficient legal basis for data processing
결정 날짜
2020년 10월 19일
권한
Austrian Data Protection Authority (dsb)
AT
섹터
Individuals and Private Associations
국가
ES
법률
GDPR상태
FINAL설명
Between February and June 2020, a private individual published information about patients on his personal Facebook page. The information included health data in terms of Art. 4 (15) GDPR. In detail, the published data comprised patient names, diagnostic findings, medical diagnoses, medication data, data on hospital admissions and discharges, patients' social security numbers and the names of the treating physicians.
법적 인용
Art. 5 (1)Art. 9
문제 및 위반 사항
Insufficient legal basis for data processing