Cyprus

Doctor

14,000 €

GDPR enforcement action by Cypriot Data Protection Commissioner on 2019.

Rank · Sector

#119

of 270 in Health Care

Rank · Cyprus

#12

of 47

Rank · All fines

#1,230

of 3,050

Case details

Authority: Cypriot Data Protection Commissioner
Date: 2019
Controller / Processor: Doctor
Sector: Health Care
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

A patient complained to the Commissioner that the request for access to her medical file was not satisfied by the hospital because the dossier could not be identified/located by the controller. After investigating the case, an administrative fine of €5,000 was imposed on the hospital.

Open original source Links to the regulator's original publication or another source.