Enforcement
EN INFORMÁTICA MÉDICA, S.L.: Insufficient data processing agreement
€60,000 fine - Spanish Data Protection Authority (aepd)
Content
The Spanish DPA has imposed a fine of EUR 60,000 on INFORMÁTICA MÉDICA, S.L.. The company acted as a processor for other companies and had engaged a subcontractor without, however, contractually regulating the relationship as required by Art. 28 GDPR.
GDPR Articles: Art. 28 GDPR
Industry: Health Care