Germany

Physician

—

GDPR enforcement action by Data Protection Authority of Brandenburg on 2021.

Case details

Authority: Data Protection Authority of Brandenburg
Date: 2021
Controller / Processor: Physician
Sector: Health Care
Quoted Articles: Art. 6 GDPR, Art. 9 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The DPA of Brandenburg imposed a fine on a physician. The father of a minor patient had filed a complaint with the DPA because the physician had transmitted numerous data on his child to a central billing office. The data included information on the child's name, address, date of birth, health insurance number, medical services provided and diagnoses made. The physician had passed on the data without the parents' consent and thus without a valid legal basis.

Open original source Links to the regulator's original publication or another source.