Finland

Company

1,600 €

GDPR enforcement action by Deputy Data Protection Ombudsman on 2023-09-04.

Rank · Sector

#237

of 270 in Health Care

Rank · Finland

#27

of 27

Rank · All fines

#2,468

of 3,050

Case details

Authority: Deputy Data Protection Ombudsman
Date: 2023-09-04
Controller / Processor: Company
Sector: Health Care
Quoted Articles: Art. 12 (3) GDPR, Art. 15 GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Finnish DPA has imposed a fine of EUR 1,600 on a company providing psychotherapy services. A customer had submitted a request for access to their stored personal data. However, the company had not informed the customer of the reason why the records of the psychotherapy sessions could not be provided.

Open original source Links to the regulator's original publication or another source.