Germany

Covid-19 test center

16,400 €

GDPR enforcement action by Data Protection Authority of Hessen on 2022.

Rank · Sector

#111

of 270 in Health Care

Rank · Germany

#56

of 116

Rank · All fines

#1,152

of 3,050

Case details

Authority: Data Protection Authority of Hessen
Date: 2022
Controller / Processor: Covid-19 test center
Sector: Health Care
Quoted Articles: Art. 6 (1) GDPR, Art. 33 (1), (5) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The DPA of Hessen has fined a Covid-19 test center EUR 16,400. The controller had sent an e-mail containing personal data to several recipients in an open distribution list. The DPA also found that the controller had failed to adequately document the data breach.

Open original source Links to the regulator's original publication or another source.