Primary Health Care in the Capital Area
€34,300
Insufficient legal basis for data processing
결정 날짜
2025년 2월 17일
권한
Icelandic data protection authority ('Persónuvernd')
IS
섹터
Health Care
국가
IS
법률
GDPR상태
FINAL설명
The Icelandic DPA has imposed a fine of EUR 34,300 on the Primary Health Care in the Capital Area. The controller processed personal and health data in shared medical record systems by merging its medical records with those of other parties and granting them access to its patients' records.
법적 인용
Art. 5 (1)Art. 6 (1)Art. 9 (2)
문제 및 위반 사항
Insufficient legal basis for data processing