Cyprus

Physician

1,500 €

GDPR enforcement action by Cypriot Data Protection Commissioner on 2023-12-07.

Rank · Sector

#241

of 270 in Health Care

Rank · Cyprus

#44

of 47

Rank · All fines

#2,524

of 3,050

Case details

Authority: Cypriot Data Protection Commissioner
Date: 2023-12-07
Controller / Processor: Physician
Sector: Health Care
Quoted Articles: Art. 5 (1) a) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Cypriot DPA has imposed a fine of EUR 1,500 on a physician. An individual had filed a complaint with the DPA because the physician had accessed their personal data in a healthcare system, even though the physician had not treated the individual or obtained their consent.

Open original source Links to the regulator's original publication or another source.