HOSPITAL RECOLETAS PONFERRADA, S.L.
€16,000
Insufficient legal basis for data processing
Datum för beslut
15 december 2022
Myndighet
Spanish Data Protection Authority (aepd)
ES
Sektor
Health Care
Land
ES
Lag
GDPRStatus
FINALBeskrivning
The Spanish DPA has imposed a fine on the healthcare facility HOSPITAL RECOLETAS PONFERRADA, S.L.. A patient had filed a complaint with the DPA. The patient had filled out a consent form during a medical examination in which certain items were already pre-ticked. The DPA also found that the controller had not complied with the patient's request for access to their personal data in a timely manner. The original fine of EUR 20,000 was reduced to EUR 16,000 due to voluntary payment.
Rättsliga hänvisningar
Art. 6 (1)Art. 15
Frågor och överträdelser
Insufficient legal basis for data processing