Deputy Data Protection Ombudsman · 27 December 2022
Company
Insufficient legal basis for data processing
Fine€122,000Fine issued
- Regulator
- Deputy Data Protection Ombudsman
- Decided
- 27 December 2022
- Country
- Finland
- Sector
- Industry and Commerce
- Regulator’s reference
- Not recorded
- Fino case number
- 2022/FI/001
What happened
In a procedure pursuant to Article 60 GDPR, the Finnish DPA imposed a €122,000 fine on a manufacturer of heart rate monitors due to lack of valid consent for the processing of personal data, including health data, on its online service.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Special categories
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/FI/001.