Spain

HOSPITAL RECOLETAS PONFERRADA, S.L.

16,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2022-12-15.

Rank · Sector

#113

of 270 in Health Care

Rank · Spain

#356

of 1,075

Rank · All fines

#1,158

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2022-12-15
Controller / Processor: HOSPITAL RECOLETAS PONFERRADA, S.L.
Sector: Health Care
Quoted Articles: Art. 6 (1) GDPR, Art. 15 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA has imposed a fine on the healthcare facility HOSPITAL RECOLETAS PONFERRADA, S.L.. A patient had filed a complaint with the DPA. The patient had filled out a consent form during a medical examination in which certain items were already pre-ticked. The DPA also found that the controller had not complied with the patient's request for access to their personal data in a timely manner. The original fine of EUR 20,000 was reduced to EUR 16,000 due to voluntary payment.

Open original source Links to the regulator's original publication or another source.