Romania

Dentist

1,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2023-01-31.

Rank · Sector

#253

of 270 in Health Care

Rank · Romania

#241

of 283

Rank · All fines

#2,653

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2023-01-31
Controller / Processor: Dentist
Sector: Health Care
Quoted Articles: Art. 6 (1) a) GDPR, Art. 9 (2) a) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Romanian DPA has fined a dentist EUR 1,000. The controller had published medical information of a patient, such as photos and X-rays, in an article on a medical blog. However, it had failed to obtain the patient's consent before publishing the medical data. Therefore, the DPA found that the controller had unlawfully processed the data.

Open original source Links to the regulator's original publication or another source.