Dent Estet Clinic SA
€1,000
Insufficient fulfilment of data breach notification obligations
Karar Tarihi
31 Ocak 2023
Otorite
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Sektör
Health Care
Ülke
RO
Hukuk
GDPRDurum
FINALAçıklama
The Romanian DPA has fined Dent Estet Clinic SA (dental practice) EUR 1,000. An employed dentist at the practice had published medical information of a patient, such as photos and X-rays, in an article on a medical blog. However, the dentist failed to obtain the patient's consent before publishing the medical data. Although the patient had informed the clinic, it failed to notify the DPA of the data breach in a timely manner.
Yasal Atıflar
Art. 33
Sorunlar & İhlaller
Insufficient fulfilment of data breach notification obligations