APD/GBA (Belgium) · 29 July 2020
Hospital
Name not published.
About: Data subject rights, Transparency
- Regulator
- APD/GBA (Belgium)
- Decided
- 29 July 2020
- Country
- Belgium
- Sector
- Not given
- Regulator’s reference
- 41/2020
- Fino case number
- 2020/BE/026
What happened
The APD/GBA (the Belgian DPA) found that a hospital that requested an audit by an external expert was the controller for the audit-related processing activity, based on Article 4(7) GDPR. The APD/GBA ordered the hospital to provide access to parts of an audit report based on the right of access, rejecting (for lack of evidence) the exceptions invoked by the hospital (confidentiality, IP rights, personal data of others).
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subjectRead →
- Art. 13Information to be provided where personal data are collected from the data subjectRead →
- Art. 14Information to be provided where personal data have not been obtained from the data subjectRead →
- Art. 15Right of access by the data subjectRead →
- Data subject rights
- Transparency
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2020/BE/026.