HOSPITAL RECOLETAS PONFERRADA, S.L.
€16,000
Insufficient legal basis for data processing
Datum odločitve
15. december 2022
Organ
Spanish Data Protection Authority (aepd)
ES
Sektor
Health Care
Država
ES
Zakon
GDPRStatus
FINALOpis
The Spanish DPA has imposed a fine on the healthcare facility HOSPITAL RECOLETAS PONFERRADA, S.L.. A patient had filed a complaint with the DPA. The patient had filled out a consent form during a medical examination in which certain items were already pre-ticked. The DPA also found that the controller had not complied with the patient's request for access to their personal data in a timely manner. The original fine of EUR 20,000 was reduced to EUR 16,000 due to voluntary payment.
Pravne navedbe
Art. 6 (1)Art. 15
Vprašanja in kršitve
Insufficient legal basis for data processing