Physician: Insufficient legal basis for data processing

The DPA of Brandenburg imposed a fine on a physician. The father of a minor patient had filed a complaint with the DPA because the physician had transmitted numerous data on his child to a central billing office. The data included information on the child's name, address, date of birth, health insurance number, medical services provided and diagnoses made. The physician had passed on the data without the parents' consent and thus without a valid legal basis.

GDPR Articles: Art. 6 GDPR, Art. 9 GDPR
Industry: Health Care