# Medical Student: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Austrian Data Protection Authority (dsb)
- Date: 2026-01-12
- Original: https://www.enforcementtracker.com/ETid-3222
- Canonical: https://overview.legal/posts/353796
- Topics: Supervisory Authorities, Healthcare

## Summary

Art. 6 (1) f) GDPR, Art. 9 (2) GDPR · Sector: Individuals and Private Associations · Decided 2026-01-12

## Full text

Austrian Data Protection Authority (dsb) fined Medical Student €200 on 2026-01-12 for: Insufficient legal basis for data processing.
GDPR Articles: Art. 6 (1) f) GDPR, Art. 9 (2) GDPR
Sector: Individuals and Private Associations
Country: Austria
Source: https://www.ris.bka.gv.at/Dokument.wxe?ResultFunctionToken=d51723de-dcba-464e-831f-8df9395195c3&Position=1&SkipToDocumentPage=True&Abfrage=Dsk&Entscheidungsart=Undefined&Organ=Undefined&SucheNachRechtssatz=True&SucheNachText=True&GZ=&VonDatum=01.01.1990&BisDatum=&Norm=&ImRisSeitVonDatum=&ImRisSeitBisDatum=&ImRisSeit=EinerWoche&ResultPageSize=100&Suchworte=DSGVO&Dokumentnummer=DSBT_20260112_2026_0_016_479_00

---
Generated by overview.legal · https://overview.legal/posts/353796 · 2026-09-09