Doctor´s Office
€3,300
Insufficient legal basis for data processing
Datum odločitve
1. januar 2024
Organ
Data Protection Authority of Hessen
DE
Sektor
Health Care
Država
DE
Zakon
GDPRStatus
FINALOpis
The DPA of Hessen has imposed a fine of EUR 3,300 on a doctor´s office. While responding to negative Google reviews, the controller revealed health data about the reviewers.
Pravne navedbe
Art. 5 (1)Art. 6 (1)Art. 9 (1)
Vprašanja in kršitve
Insufficient legal basis for data processing