Germany

Medical care center

—

GDPR enforcement action by Data Protection Authority of Bremen on 2022.

Case details

Authority: Data Protection Authority of Bremen
Date: 2022
Controller / Processor: Medical care center
Sector: Health Care
Quoted Articles: Unknown
Type of violation: Insufficient legal basis for data processing

Summary

The DPA of Bremen has imposed a fine on a medical care center for having scanned a customer's ID card against their will and stored the copy. Once the customer complained, they were threatened with termination of the customer relationship. In assessing the fine, the DPA took into account the fact that the ID card had been scanned against the explicit objection of the data subject.

Open original source Links to the regulator's original publication or another source.