Enforcement · Austrian Data Protection Authority (dsb) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Private Individual: Insufficient legal basis for data processing

€600 Fine
Private Individual
AUSTRIA
Art. 5 GDPR Art. 9 GDPR
Health Data Healthcare Healthcare Social Media Special Categories of Data Types of Special Categories of Personal Data Processing Security
Oct 19, 2020 Source

How it connects

Related across sources

Case Law NSS - 1 As 183/2023-62 Supreme Administrative Court Literature If it ain’t broke, don’t fix it? Ten improvements for the upcoming tenth anniversary of the General Data Protection Regulation Computer law & security review Guidance Recommendations 1/2025 on the 2027 WADA World Anti-Doping Code EDPB Guidance EDPB Annual Report 2023 EDPB News De Ierse autoriteit voor gegevensbescherming heeft Instagram een boete van 405 miljoen euro opgelegd vanwege schendingen van de privacy van kinderen. Hunton Andrews Kurth Guidance EDPB Annual Report 2021 EDPB

Full text

Between February and June 2020, a private individual published information about patients on his personal Facebook page. The information included health data in terms of Art. 4 (15) GDPR. In detail, the published data comprised patient names, diagnostic findings, medical diagnoses, medication data, data on hospital admissions and discharges, patients' social security numbers and the names of the treating physicians.

Industry: Health Care

Original document at the source www.ris.bka.gv.at

Similar Content