Sanction RGPD Data Protection Authority of Hessen — Covid-19 test center : 16 k€ (2022)
- Autorité de contrôle
- Data Protection Authority of Hessen
- Pays
- Allemagne
- Entreprise / secteur
- Covid-19 test center
- Montant de l'amende
- 16 k€
- Date de la décision
- 1 janvier 2022
- Fondement juridique
- Art. 6 (1), Art. 33 (1), (5)
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
The DPA of Hessen has fined a Covid-19 test center EUR 16,400. The controller had sent an e-mail containing personal data to several recipients in an open distribution list. The DPA also found that the controller had failed to adequately document the data breach.