Details:

Summary A healthcare provider collected personal data through a software provided by an external body without informing the patients.
Link: link
Related articles:  Art. 5 (1) a) GDPR, Art. 12 (1) GDPR, Art. 28 (2), (3) GDPR
Type: Insufficient fulfilment of information obligations
Fine: EUR Unknown
Sector Health Care

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law