Germany
Physician
—
GDPR enforcement action by Data Protection Authority of Nordrhein-Westfalen on 2022.
Case details
- Authority
- Data Protection Authority of Nordrhein-Westfalen
- Date
- 2022
- Controller / Processor
- Physician
- Sector
- Public Sector and Education
- Quoted Articles
- Art.5 GDPR, Art. 6 GDPR, Art. 9 GDPR
- Type of violation
- Insufficient legal basis for data processing
Summary
The DPA of Nordrhein-Westfalen has fined a physician. The physician had responded to a negative online reviews regarding their practice, disclosing personal data of a patient.
Open original source
Links to the regulator's original publication or another source.
Related fines
Germany
2024
45,000,000 €
ETid-2646
Vodafone GmbH
Media, Telecoms and Broadcasting
Germany
2020-10-01
35,258,708 €
ETid-405
H&M Hennes & Mauritz Online Shop A.B. & Co. KG
Employment
Germany
2024
4,113,486 €
ETid-2638
Unknown
Not assigned
Germany
2019
3,501,000 €
ETid-943
Unknown
Individuals and Private Associations
Germany
2022
2,001,000 €
ETid-1870
Unknown
Individuals and Private Associations
Germany
2022-03-03
1,900,000 €
ETid-1103
BREBAU GmbH
Real Estate