Romania

Dentist

1,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2023-01-31.

Rank · Sector

#252

of 269 in Health Care

Rank · Romania

#240

of 282

Rank · All fines

#2,643

of 3,039

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2023-01-31
Controller / Processor: Dentist
Sector: Health Care
Quoted Articles: Art. 6 (1) a) GDPR, Art. 9 (2) a) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Romanian DPA has fined a dentist EUR 1,000. The controller had published medical information of a patient, such as photos and X-rays, in an article on a medical blog. However, it had failed to obtain the patient's consent before publishing the medical data. Therefore, the DPA found that the controller had unlawfully processed the data.

Open original source Links to the regulator's original publication or another source.