Doctor´s Office
€3,700
Insufficient legal basis for data processing
Dato for beslutning
1. januar 2024
Myndighet
Data Protection Authority of Hessen
DE
Sektor
Health Care
Land
DE
Lov og rett
GDPRStatus
FINALBeskrivelse
The DPA of Hessen has imposed a fine of EUR 3,700 on a doctor´s office. While responding to negative Google reviews, the controller revealed health data about the reviewers.
Juridiske henvisninger
Art. 5 (1)Art. 6 (1)Art. 9 (1)
Problemer og overtredelser
Insufficient legal basis for data processing