GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Individual Doctor

Country
Cyprus
Fine
14,000 EUR
Date
2019-09-06
Sector
Health Professional/Medical services
Articles
Articles 9(1) and 9(2)(a) of the GDPR

The posting of sensitive personal data of a patient from a Doctor on Instagram

The complainant alleged that her doctor had published and/or shared her personal data on Instagram without her consent. After investigating the complaint, the DPA found that the publication was not in line with the purpose of the consent given by the complainant, since her identity had been fully disclosed. Authority: Office of the Commissioner for Personal Data Protection Cyprus