Enforcement·Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)EN
Export
S.C. Hayat Medical & Dental S.R.L.: Insufficient legal basis for data processing
The Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) fined S.C.
StatusNot cited by any decision here yet
Summary
Hayat Medical & Dental S.R.L. €5,000 for processing personal data without a sufficient legal basis. The investigation found the healthcare provider violated GDPR Articles 5(1)(a) and 6(1) concerning the lawfulness, fairness, and transparency of data processing. The authority exercised its investigative powers under Article 58(1)(a) and (e) to issue the sanction.
We hold a reference to this item, not its text.
enforcementtracker.comRead at the sourceHow it connects
Related across sources
C-203/22 CK v Magistrat der Stadt Wien In Case C-203/22, the Court of Justice of the European Union interpreted Article 15(1)(h) of the GDPR in response to a preliminary ruling from the Verwaltungsgericht Wien… CJEU ·First Chamber Feb 27, 2025 Profiling Personal Data Automated Decision-Making
Opinion 03/2022 EDPB-EDPS Joint Opinion 03/2022 on the Proposal for a Regulation on the European Health Data Space Opinion Jul 12, 2022 Healthcare Health Data Types of Special Categories of Personal Data
C-46/23 Budapest Főváros IV. Kerület Újpest Önkormányzat Polgármesteri Hivatala v Nemzeti Adatvédelmi és Információszabadság Hatóság In a preliminary ruling requested by the Budapest High Court, the Court of Justice interpreted whether Article 58(2)(d) and (g) of the GDPR permits a national supervisory… CJEU ·Fifth Chamber Mar 14, 2024 Right to be Forgotten Personal Data Right to Restriction
C-416/23 Österreichische Datenschutzbehörde v F R In Case C-416/23, the Court of Justice of the European Union (First Chamber) ruled on a preliminary reference from the Austrian Supreme Administrative Court concerning the… CJEU ·First Chamber Jan 9, 2025 Right of Access Personal Data Supervision
Guidelines 05/2020 consent under Regulation 2016/679 Guidelines on consent Guidelines ·EDPB May 4, 2020 Consent Personal Data IP Address
C-526/24 Brillen Rottler GmbH & Co. KG v TC The Court of Justice of the European Union (Fourth Chamber) ruled on whether a controller may refuse a data subject's first access request under Article 15 GDPR on grounds that… CJEU ·Fourth Chamber Mar 19, 2026 Personal Data Right of Access Liability