The Netherlands The Netherlands

Menzis (Health Insurance Company)

50,000 €

GDPR enforcement action by Dutch Supervisory Authority for Data Protection (AP) on 2019-10-31.

Rank · Sector
#125
of 322 in Finance, Insurance and Consulting
Rank · The Netherlands
#26
of 43
Rank · All fines
#696
of 3,050

Case details

Authority
Dutch Supervisory Authority for Data Protection (AP)
Date
2019-10-31
Controller / Processor
Menzis (Health Insurance Company)
Sector
Finance, Insurance and Consulting
Quoted Articles
Art. 5 GDPR
Type of violation
Non-compliance with general data processing principles

Summary

Marketing staff had access to patient data. Among other things, this violated the purpose limitation principle.

Open original source Links to the regulator's original publication or another source.

Related fines