Spain

CENTRO MEDICO REY FERNANDO, S.L.P.

600 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2026-03-13.

Rank · Sector

#265

of 270 in Health Care

Rank · Spain

#941

of 1,075

Rank · All fines

#2,833

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2026-03-13
Controller / Processor: CENTRO MEDICO REY FERNANDO, S.L.P.
Sector: Health Care
Quoted Articles: Art. 12 GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Spanish DPA has imposed a fine of EUR 600 on CENTRO MEDICO REY FERNANDO, S.L.P. The data controller charged a data subject a fee of €30 for providing her with her medical record, which consisted of just one page. This was the first time the data subject had requested her medical records, and the data controller did not allow her to request them electronically. Furthermore, the data controller only issued a receipt for the payment of the fee after the data subject had insisted. The original fine of EUR 1,000 was reduced to EUR 600 due to immediate payment and admission of responsibility by the controller.

Open original source Links to the regulator's original publication or another source.