Primary Health Care in the Capital Area
€34,300
Insufficient legal basis for data processing
Lēmuma datums
2025. gada 17. februāris
Iestāde
Icelandic data protection authority ('Persónuvernd')
IS
Nozare
Health Care
Valsts
IS
Likums
GDPRStatuss
FINALApraksts
The Icelandic DPA has imposed a fine of EUR 34,300 on the Primary Health Care in the Capital Area. The controller processed personal and health data in shared medical record systems by merging its medical records with those of other parties and granting them access to its patients' records.
Juridiskās atsauces
Art. 5 (1)Art. 6 (1)Art. 9 (2)
Jautājumi un pārkāpumi
Insufficient legal basis for data processing