Medical centers
€510
Insufficient legal basis for data processing
Datum för beslut
8 april 2019
Myndighet
Data Protection Commision of Bulgaria (KZLD)
BG
Sektor
Health Care
Land
BG
Lag
GDPRStatus
FINALBeskrivning
The sanction of 510 EUR was imposed on each medical center for unlawful processing of the personal data of data subject G.B. by a medical centre for the purpose of changing his GP. The medical centre used a software to generate a registration form for change of GP which was submitted to the Regional Health Insurance Fund and then to another medical centre, which subsequently also unlawfully processed the personal data of G.B.
Rättsliga hänvisningar
Art. 5 (1)Art. 9 (1)Art. 9 (2)Art. 6 (1)
Frågor och överträdelser
Insufficient legal basis for data processing