Physician

€3,000

Insufficient legal basis for data processing

Dátum rozhodnutia

21. mája 2021

Úrad

Spanish Data Protection Authority (aepd)

ES

Sektor

Health Care

Krajina

IT

Právo

GDPR

Stav

FINAL

Popis

The Spanish DPA (AEPD) has fined a physician EUR 3,000. The controller had left his/her former clinic and started working in a new clinic. The complainant had taken over the controller's former clinic. The purchase agreement explicitly stated that the selling party (the controller) was not allowed to make a copy of the patient's files under any circumstances. Nevertheless, the controller had informed his/her former patients that his/her services could be obtained at his/her new clinic in the future. The AEPD found that the controller had acted not only in breach of contract but also in breach of data protection legislation by contacting the former patients.

Právne citácie

Art. 6

Problémy a porušenia

Insufficient legal basis for data processing

Aktualizujte informácie o presadzovaní ochrany osobných údajov

Rešpektujeme vaše súkromie. Jeden e-mail mesačne, žiadny spam, odhlásiť sa môžete kedykoľvek.