PIONIER (law firm)

€9,600

Insufficient legal basis for data processing

Ngày ra quyết định

30 tháng 11, 2022

Thẩm quyền

Polish National Personal Data Protection Office (UODO)

PL

Ngành

Finance, Insurance and Consulting

Quốc gia

PL

Luật

GDPR

Trạng thái

FINAL

Mô tả

The Polish DPA has imposed a fine of EUR 9,600 on the law firm PIONIER. The law firm mainly represents victims of traffic accidents in proceedings against insurance companies and other entities. In this context, it supports its clients in claims for damages as well as claims for reimbursement of medical treatment costs. During its investigation, the DPA found that the law firm processed personal data, including health data, of potential clients without a valid legal basis. The law firm obtained personal data of potential clients based on press releases as well as social media reports. This allowed it to contact potential clients and offer them its services. During an initial conversation, they asked them for their verbal consent to process their personal data up until the conclusion of a contract. However, the DPA found that the consent should have been given in a way that it could still be proven at a later stage (e.g., through a register of consents).

Trích dẫn pháp lý

Art. 5 (1)Art. 6 (1)Art. 9

Vấn đề & Vi phạm

Insufficient legal basis for data processing

Cập nhật thông tin về việc thực thi quy định bảo vệ dữ liệu cá nhân

Chúng tôi tôn trọng quyền riêng tư của bạn. Chỉ một email mỗi tháng, không spam, có thể hủy đăng ký bất cứ lúc nào.