Doctor´s Office: Insufficient legal basis for data processing

€3,700 fine - Data Protection Authority of Hessen

€3,700 Fine

Doctor´s Office

GERMANY

Insufficient legal basis for data processing

Jan 1, 2024 Source

Content

The DPA of Hessen has imposed a fine of EUR 3,700 on a doctor´s office. While responding to negative Google reviews, the controller revealed health data about the reviewers.

GDPR Articles: Art. 5 (1) a) GDPR, Art. 6 (1) GDPR, Art. 9 (1) GDPR
Industry: Health Care