Physician
€5,600
Insufficient legal basis for data processing
決定日期
2022年4月22日
權限
Spanish Data Protection Authority (aepd)
ES
部門
Health Care
國家
IT
法律
GDPR狀態
FINAL說明
The Spanish DPA (AEPD) has fined a physician. The physician had used recordings of a patient's treatment for advertising purposes. However, the patient had not consented to this. For this reason, the DPA found that the doctor had processed the data without a valid legal basis. The original fine of EUR 7,000 was reduced to EUR 5,600 due to immediate payment.
法律引文
Art. 6 (1)
問題與違規
Insufficient legal basis for data processing