Persónuvernd (Island) · 12 May 2026
DoctorPrivate person
About: Special categories, Unlawful processing
FineNo fineOther Outcome
- Regulator
- Persónuvernd (Island)
- Decided
- 12 May 2026
- Country
- Iceland
- Sector
- Not given
- Regulator’s reference
- 2025020471
- Fino case number
- 2026/IS/002
What happened
The DPA held that a doctor unlawfully accessed a data subject’s medical records without proving a valid legal basis, but took no corrective measure, considering that the doctor had provided some medical advice at the data subject’s request.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 6Lawfulness of processing6(1)Read →
- Art. 9Processing of special categories of personal data9(2)Read →
- Special categories
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2026/IS/002.