Primary Health Care in the Capital Area
€34,300
Insufficient legal basis for data processing
Ngày ra quyết định
17 tháng 2, 2025
Thẩm quyền
Icelandic data protection authority ('Persónuvernd')
IS
Ngành
Health Care
Quốc gia
IS
Luật
GDPRTrạng thái
FINALMô tả
The Icelandic DPA has imposed a fine of EUR 34,300 on the Primary Health Care in the Capital Area. The controller processed personal and health data in shared medical record systems by merging its medical records with those of other parties and granting them access to its patients' records.
Trích dẫn pháp lý
Art. 5 (1)Art. 6 (1)Art. 9 (2)
Vấn đề & Vi phạm
Insufficient legal basis for data processing