Primary Health Care in the Capital Area
€34,300
Insufficient legal basis for data processing
Sprendimo priėmimo data
2025 m. vasario 17 d.
Institucija
Icelandic data protection authority ('Persónuvernd')
IS
Sektorius
Health Care
Šalis
IS
Teisė
GDPRStatusas
FINALAprašymas
The Icelandic DPA has imposed a fine of EUR 34,300 on the Primary Health Care in the Capital Area. The controller processed personal and health data in shared medical record systems by merging its medical records with those of other parties and granting them access to its patients' records.
Teisinės citatos
Art. 5 (1)Art. 6 (1)Art. 9 (2)
Problemos ir pažeidimai
Insufficient legal basis for data processing