Hospital Campogrande DE

€10,000

Non-compliance with general data processing principles

วันที่ตัดสินใจ

10 มีนาคม 2564

อำนาจ

Spanish Data Protection Authority (aepd)

ES

ภาคส่วน

Health Care

ประเทศ

ES

กฎหมาย

GDPR

สถานะ

FINAL

คำอธิบาย

The Spanish DPA (AEPD) imposed a fine of EUR 10,000 on Hospital Campogrande DE. A patient filed a complaint against the controller with the DPA. The controller had performed an MRI on the patient on September 05, 2019 due to an injury of the right knee. The cost of the examination was covered by the patient's private health insurance. Due to a work-related injury, another MRI of the same knee had to be performed on September 27, 2019. Although the second MRI was performed at another hospital, albeit one belonging to the corporate group, the hospital system also linked the first, privately arranged MRI to the patient's record at the second hospital. The first MRI was provided through the hospital network without any medical justification. This turned out to be very unfavorable for the patient when, upon presentation of the second MRI, the company physician informed him that he would have to contact his private physician or the social insurance with this injury, since the incident could not be considered an occupational accident. He justified this with the existence of the first MRI, which had a non-occupational cause.

การอ้างอิงทางกฎหมาย

Art. 5 (1)

ปัญหาและการละเมิด

Non-compliance with general data processing principles

อัปเดตข้อมูลเกี่ยวกับการบังคับใช้ความเป็นส่วนตัว

เราเคารพความเป็นส่วนตัวของคุณ อีเมลเพียงเดือนละครั้ง ไม่มีสแปม ยกเลิกการรับข่าวสารได้ตลอดเวลา