Deputy Data Protection Ombudsman · 26 December 2021
Medical clinic
Insufficient fulfilment of information obligations
Fine€5,000Fine issued
- Regulator
- Deputy Data Protection Ombudsman
- Decided
- 26 December 2021
- Country
- Finland
- Sector
- Health Care
- Regulator’s reference
- Not recorded
- Fino case number
- 2021/FI/001
What happened
The Finnish DPA imposed a fine of €5,000 on a medical clinic for not implementing the data subject's access request and failing to inform data subjects about the processing of personal data.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(a)Read →
- Art. 25Data protection by design and by defaultRead →
- Accountability
- Data principles
- Transparency
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2021/FI/001.