Enforcement
EN HOSPITAL RECOLETAS PONFERRADA, S.L.: Insufficient legal basis for data processing
€16,000 fine - Spanish Data Protection Authority (aepd)
Content
The Spanish DPA has imposed a fine on the healthcare facility HOSPITAL RECOLETAS PONFERRADA, S.L.. A patient had filed a complaint with the DPA. The patient had filled out a consent form during a medical examination in which certain items were already pre-ticked. The DPA also found that the controller had not complied with the patient's request for access to their personal data in a timely manner. The original fine of EUR 20,000 was reduced to EUR 16,000 due to voluntary payment.
GDPR Articles: Art. 6 (1) GDPR, Art. 15 GDPR
Industry: Health Care