Clinic owner
€10,000
Insufficient legal basis for data processing
Lēmuma datums
2024. gada 5. jūlijs
Iestāde
Spanish Data Protection Authority (aepd)
ES
Nozare
Health Care
Valsts
ES
Likums
GDPRStatuss
FINALApraksts
The Spanish DPA has fined the owner of a plastic surgery clinic EUR 10,000. The controller posted before-and-after pictures of an individual who had undergone surgery at the clinic on social media (Facebook and Instagram) without obtaining the individual’s consent.
Juridiskās atsauces
Art. 6 (1)Art. 9
Jautājumi un pārkāpumi
Insufficient legal basis for data processing