Private individual: Insufficient legal basis for data processing

The DPA of Brandenburg has imposed a three-figure fine on six private individuals. The individuals, who worked in a hospital, had accessed the medical records of a colleague who was undergoing treatment in the hospital at the time, without being involved in their treatment.

GDPR Articles: Unknown
Industry: Individuals and Private Associations