Bulgaria

Medical centers

510 €

GDPR enforcement action by Data Protection Commision of Bulgaria (KZLD) on 2019-04-08.

Rank · Sector

#267

of 270 in Health Care

Rank · Bulgaria

#27

of 31

Rank · All fines

#2,844

of 3,050

Case details

Authority: Data Protection Commision of Bulgaria (KZLD)
Date: 2019-04-08
Controller / Processor: Medical centers
Sector: Health Care
Quoted Articles: Art. 5 (1) a) GDPR, Art. 9 (1) GDPR, Art. 9 (2) GDPR, Art. 6 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The sanction of 510 EUR was imposed on each medical center for unlawful processing of the personal data of data subject G.B. by a medical centre for the purpose of changing his GP. The medical centre used a software to generate a registration form for change of GP which was submitted to the Regional Health Insurance Fund and then to another medical centre, which subsequently also unlawfully processed the personal data of G.B.

Open original source Links to the regulator's original publication or another source.