Dentist
€1,000
Insufficient legal basis for data processing
Ngày ra quyết định
31 tháng 1, 2023
Thẩm quyền
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Ngành
Health Care
Quốc gia
IT
Luật
GDPRTrạng thái
FINALMô tả
The Romanian DPA has fined a dentist EUR 1,000. The controller had published medical information of a patient, such as photos and X-rays, in an article on a medical blog. However, it had failed to obtain the patient's consent before publishing the medical data. Therefore, the DPA found that the controller had unlawfully processed the data.
Trích dẫn pháp lý
Art. 6 (1)Art. 9 (2)
Vấn đề & Vi phạm
Insufficient legal basis for data processing