Private individual
€600
Insufficient legal basis for data processing
Lēmuma datums
2020. gada 19. oktobris
Iestāde
Austrian Data Protection Authority (dsb)
AT
Nozare
Individuals and Private Associations
Valsts
ES
Likums
GDPRStatuss
FINALApraksts
Between February and June 2020, a private individual published information about patients on his personal Facebook page. The information included health data in terms of Art. 4 (15) GDPR. In detail, the published data comprised patient names, diagnostic findings, medical diagnoses, medication data, data on hospital admissions and discharges, patients' social security numbers and the names of the treating physicians.
Juridiskās atsauces
Art. 5 (1)Art. 9
Jautājumi un pārkāpumi
Insufficient legal basis for data processing