Difference between revisions of "Commissioner - patient data on Instagram"

From GDPRhub
Line 40: Line 40:
 
==English summary==
 
==English summary==
 
===Facts===
 
===Facts===
The complainant, a patient, filed a complaint with the Commissioner because her doctor published sensitive personal data about her with her full identity without her prior permission on the social network Instagram.
+
Patient filed a complaint with the Commissioner because her doctor published her sensitive personal data in addition to her full identity on the social network Instagram without her prior consent. After investigation, the Commissioner found that the patient's consent for processing of her personal data did not cover the communication of this data on Instagram.  
  
 
===Dispute===
 
===Dispute===
Does the controller need the patient's consent to release personal data about her on the social network Instagram?
+
Does the doctor, as data controller, need the patient's consent to publish patient's personal data, including sensitive data, on the social network Instagram?
  
 
===Holding===
 
===Holding===
The Commissioner fined the doctor of € 14.000 for unlawful processing of personal data.  
+
The Commissioner found that the patient's consent must cover this publication for its lawfulness. Therefore, she fined the doctor € 14.000 for unlawful processing of personal (sensitive) data.  
  
 
==Comment==
 
==Comment==
Line 53: Line 53:
 
''Share blogs or news articles here!''
 
''Share blogs or news articles here!''
 
==English Machine Translation of the Decision==
 
==English Machine Translation of the Decision==
n/a <pre>
+
There is no available machine translated decision. Please refer to the Cypriot original decision for details.
 +
<pre>
 
Help us to fil this section!
 
Help us to fil this section!
 
</pre>
 
</pre>

Revision as of 21:19, 20 January 2020

Commissioner - patient data on instragram
LogoCY.jpg
Authority: Commissioner (Cyprus)
Jurisdiction: Cyprus
Relevant Law: Article 6(1)(a) GDPR
Type: Complaint
Outcome: Upheld
Decided: 11.10.2019
Published: n/a
Fine: 14,000 EUR
Parties: Anonymous
National Case Number: n/a
European Case Law Identifier: n/a
Appeal: n/a
Original Language: Greek
Original Source: In-Cyprus (EN)

The Commissioner fined a doctor € 14,000 for publishing sensitive patient data on Instagram.

English summary

Facts

Patient filed a complaint with the Commissioner because her doctor published her sensitive personal data in addition to her full identity on the social network Instagram without her prior consent. After investigation, the Commissioner found that the patient's consent for processing of her personal data did not cover the communication of this data on Instagram.

Dispute

Does the doctor, as data controller, need the patient's consent to publish patient's personal data, including sensitive data, on the social network Instagram?

Holding

The Commissioner found that the patient's consent must cover this publication for its lawfulness. Therefore, she fined the doctor € 14.000 for unlawful processing of personal (sensitive) data.

Comment

Share your comment here!

Further Resources

Share blogs or news articles here!

English Machine Translation of the Decision

There is no available machine translated decision. Please refer to the Cypriot original decision for details.

Help us to fil this section!