Data Protection Authority of Sweden (Integritetsskyddsmyndigheten) · 12 May 2020
Health and Medical Board of the Region of Örebro County
Insufficient legal basis for data processing
Fine€11,200Fine issued
- Regulator
- Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)
- Decided
- 12 May 2020
- Country
- Sweden
- Sector
- Public Sector and Education
- Regulator’s reference
- Not recorded
- Fino case number
- 2020/SE/013
What happened
The Swedish DPA fined a Health and Medical Committee about €11,350 (SEK 120,000) for publishing sensitive personal data of a patient on a webpage without a legal basis. The DPA further ruled that instead of orally instructions written ones are needed for the publication on the webpage.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Data principles
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2020/SE/013.