Details:
| Summary | The DPA of Brandenburg imposed a fine on a physician. The father of a minor patient had filed a complaint with the DPA because the physician had transmitted numerous data on his child to a central billing office. The data included information on the child’s name, address, date of birth, health insurance number, medical services provided and diagnoses made. The physician had passed on the data without the parents’ consent and thus without a valid legal basis. |
| Link: | link |
| Related articles: | Art. 6 GDPR, Art. 9 GDPR |
| Type: | Insufficient legal basis for data processing |
| Fine: | EUR Fine in three-digit amount |
| Sector | Health Care |
All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/