Sanction RGPD Austrian Data Protection Authority (dsb) — Private Individual : 600 € (2020)
- Autorité de contrôle
- Austrian Data Protection Authority (dsb)
- Pays
- Autriche
- Entreprise / secteur
- Private Individual
- Montant de l'amende
- 600 €
- Date de la décision
- 19 octobre 2020
- Fondement juridique
- Art. 5 (1) a), Art. 9
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
Between February and June 2020, a private individual published information about patients on his personal Facebook page. The information included health data in terms of Art. 4 (15) GDPR. In detail, the published data comprised patient names, diagnostic findings, medical diagnoses, medication data, data on hospital admissions and discharges, patients' social security numbers and the names of the treating physicians.