Sanction RGPD Icelandic data protection authority ('Persónuvernd') — Primary Health Care in the Capital Area : 34 k€ (2025)
- Autorité de contrôle
- Icelandic data protection authority ('Persónuvernd')
- Pays
- Islande
- Entreprise / secteur
- Primary Health Care in the Capital Area
- Montant de l'amende
- 34 k€
- Date de la décision
- 17 février 2025
- Fondement juridique
- Art. 5 (1) a), Art. 6 (1), Art. 9 (2)
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
The Icelandic DPA has imposed a fine of EUR 34,300 on the Primary Health Care in the Capital Area. The controller processed personal and health data in shared medical record systems by merging its medical records with those of other parties and granting them access to its patients' records.