Enforcement
EN Physician: Insufficient legal basis for data processing
€5,600 fine - Spanish Data Protection Authority (aepd)
Content
The Spanish DPA (AEPD) has fined a physician. The physician had used recordings of a patient's treatment for advertising purposes. However, the patient had not consented to this. For this reason, the DPA found that the doctor had processed the data without a valid legal basis. The original fine of EUR 7,000 was reduced to EUR 5,600 due to immediate payment.
GDPR Articles: Art. 6 (1) GDPR
Industry: Health Care