Result of the resolution: Declaration of breach
In first place, it is considered that the imputed entity would have harmed the principle of confidentiality of the data, since several persons who loaned the entity service accessed the clinical history of the accusing person without this access being justified by any welfare reason. In second place, the entity harmed the safety measure related to the register of accesses, by lack of periodic auditings in relation to this register. Applied articles: Art. 10, 9, 44.3.d) and 44.3.h) LOPD; 103 RLOPD