Details:

Summary The Hellenic DPA has fined Private Polyclinic and Diagnostic Centre of Pyle Axiou EUR 30,000. A patient had requested access to data from an imaging examination. Due to lack of availability of the images, the clinic could not grant the request for access. The DPA found that the clinic had failed to provide adequate storage facilities for the images and thus violated Art. 5 (1) f) GDPR.
Link: link
Related articles:  Art. 5 (1) f) GDPR
Type: Non-compliance with general data processing principles
Fine: EUR 30,000
Sector Health Care

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law