Spain

Centro de Investigación y Estudio para la Obesidad, SL

50,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-10-09.

Rank · Sector

#63

of 270 in Health Care

Rank · Spain

#214

of 1,071

Rank · All fines

#695

of 3,042

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-10-09
Controller / Processor: Centro de Investigación y Estudio para la Obesidad, SL
Sector: Health Care
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

Fines for the transfer of the data subject's personal data to Evo Finance EFC, SA in the course of processing a health insurance application, without a sufficient legal basis for the transfer of data, as the medical treatment in question has never been carried out.

Open original source Links to the regulator's original publication or another source.