Private individual
€600
Insufficient legal basis for data processing
Ngày ra quyết định
19 tháng 10, 2020
Thẩm quyền
Austrian Data Protection Authority (dsb)
AT
Ngành
Individuals and Private Associations
Quốc gia
ES
Luật
GDPRTrạng thái
FINALMô tả
Between February and June 2020, a private individual published information about patients on his personal Facebook page. The information included health data in terms of Art. 4 (15) GDPR. In detail, the published data comprised patient names, diagnostic findings, medical diagnoses, medication data, data on hospital admissions and discharges, patients' social security numbers and the names of the treating physicians.
Trích dẫn pháp lý
Art. 5 (1)Art. 9
Vấn đề & Vi phạm
Insufficient legal basis for data processing