# HOSPITAL RECOLETAS PONFERRADA, S.L.: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2022-12-15
- Original: https://www.enforcementtracker.com/ETid-1532
- Canonical: https://overview.legal/posts/47647
- Topics: Healthcare, Health Data, Healthcare, Consent, Personal Data, Controllers, Processing, Data Controller, Processing Agreement, Supervisory Authorities

## Summary

The Spanish DPA has imposed a fine on the healthcare facility HOSPITAL RECOLETAS PONFERRADA, S.L.. A patient had filed a complaint with the DPA. The patient had filled out a consent form during a medical examination in which certain items were already pre-ticked. The DPA also found that the controller had not complied with the patient's request for access to their personal data in a timely manner. The original fine of EUR 20,000 was reduced to EUR 16,000 due to voluntary payment.

## Full text

The Spanish DPA has imposed a fine on the healthcare facility HOSPITAL RECOLETAS PONFERRADA, S.L.. A patient had filed a complaint with the DPA. The patient had filled out a consent form during a medical examination in which certain items were already pre-ticked. The DPA also found that the controller had not complied with the patient's request for access to their personal data in a timely manner. The original fine of EUR 20,000 was reduced to EUR 16,000 due to voluntary payment.

GDPR Articles: Art. 6 (1) GDPR, Art. 15 GDPR
Industry: Health Care

---
Generated by overview.legal · https://overview.legal/posts/47647 · 2026-08-22