The Netherlands The Netherlands

Menzis (Health Insurance Company)

50,000 €

GDPR enforcement action by Dutch Supervisory Authority for Data Protection (AP) on 2019-10-31.

Rank · Sector
#126
of 323 in Finance, Insurance and Consulting
Rank · The Netherlands
#26
of 43
Rank · All fines
#701
of 3,059

Case details

Authority
Dutch Supervisory Authority for Data Protection (AP)
Date
2019-10-31
Controller / Processor
Menzis (Health Insurance Company)
Sector
Finance, Insurance and Consulting
Quoted Articles
Art. 5 GDPR
Type of violation
Non-compliance with general data processing principles

Summary

Marketing staff had access to patient data. Among other things, this violated the purpose limitation principle.

Open original source Links to the regulator's original publication or another source.

Related fines