Covid-19 test center
€16,400
Insufficient legal basis for data processing
Lēmuma datums
2022. gada 1. janvāris
Iestāde
Data Protection Authority of Hessen
DE
Nozare
Health Care
Valsts
DE
Likums
GDPRStatuss
FINALApraksts
The DPA of Hessen has fined a Covid-19 test center EUR 16,400. The controller had sent an e-mail containing personal data to several recipients in an open distribution list. The DPA also found that the controller had failed to adequately document the data breach.
Juridiskās atsauces
Art. 6 (1)Art. 33 (1)
Jautājumi un pārkāpumi
Insufficient legal basis for data processing