Doctor´s Office
€3,700
Insufficient legal basis for data processing
결정 날짜
2024년 1월 1일
권한
Data Protection Authority of Hessen
DE
섹터
Health Care
국가
DE
법률
GDPR상태
FINAL설명
The DPA of Hessen has imposed a fine of EUR 3,700 on a doctor´s office. While responding to negative Google reviews, the controller revealed health data about the reviewers.
법적 인용
Art. 5 (1)Art. 6 (1)Art. 9 (1)
문제 및 위반 사항
Insufficient legal basis for data processing