Austrian Data Protection Authority (DSB) · 12 January 2026
Medical Student
Insufficient legal basis for data processing
Fine€200Fine issued
- Regulator
- Austrian Data Protection Authority (DSB)
- Decided
- 12 January 2026
- Country
- Austria
- Sector
- Individuals and Private Associations
- Regulator’s reference
- Not recorded
- Fino case number
- 2026/AT/002
What happened
The DPA fined a medical student €200 for filming a hospital patient with dementia and sharing the video with a fellow student. It found that the recording and disclosure constituted unlawful processing of health data.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 6Lawfulness of processing6(1)(f)Read →
- Art. 9Processing of special categories of personal data9(2)Read →
- Special categories
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2026/AT/002.