Contact
Access by a private company that is part of a business group providing health services to medical data stored by another company in the same group within the framework of the public provision of health services.
19/04/2021
Result of the resolution: Economic sanction
The company that provides public health services is penalised as being responsible for an infringement of the principle of application (which subsumes violations of the principles of purpose limitation and of loyalty, given its connection); in an ideal contest with the infringement of the data protection obligation from design and by default.