Covid-19 test center: Insufficient legal basis for data processing

€16,400 fine - Data Protection Authority of Hessen

€16,400 Fine

Covid-19 test center

GERMANY

Insufficient legal basis for data processing

Jan 1, 2022 Source

Content

The DPA of Hessen has fined a Covid-19 test center EUR 16,400. The controller had sent an e-mail containing personal data to several recipients in an open distribution list. The DPA also found that the controller had failed to adequately document the data breach.

GDPR Articles: Art. 6 (1) GDPR, Art. 33 (1), (5) GDPR
Industry: Health Care