Medical care center
不可用
Insufficient legal basis for data processing
決定日期
2022年1月1日
權限
Data Protection Authority of Bremen
DE
部門
Health Care
國家
DE
法律
GDPR狀態
FINAL說明
The DPA of Bremen has imposed a fine on a medical care center for having scanned a customer's ID card against their will and stored the copy. Once the customer complained, they were threatened with termination of the customer relationship. In assessing the fine, the DPA took into account the fact that the ID card had been scanned against the explicit objection of the data subject.
問題與違規
Insufficient legal basis for data processing