The information on which the search is based has been translated by a computer system without human intervention. It may contain errors in vocabulary, syntax or grammar. The translation may also produce mistakes in the searches performed.
78 results were found for your search terms Healthcare facility
Lack of accreditation of express consent to communicate health data.
PS 30/2019
The doctor of a hospital who treated the complainant during a medical treatment, sent a medical report to the head of the complainant, at the request of the complainant, who requested the sending of this report with the purpose of proving the reason and the expected duration of your medical leave, so that you can receive 100% of your salary. The complainant claims that he requested that an indicative report be sent only from those two ends (reason and duration of the discharge), and the Hospital has not proved that it had the express prior consent to send the other data of health listed in the report submitted, and which had nothing to do with the cause and duration of the treatment referred to, which constitutes a very serious infringement.
02/03/2020
Responsible and in charge of processing in the conduct and conservation of analytics
CNS 1/2020
In the case described in the consultation, the hospital that subcontracts the conduct of its patients' analytics to a laboratory is responsible for the treatment, as it is the one who "determines the purposes and the treatment" of the patients' data, and the laboratory is responsible for the processing of this data. The fact that the laboratory has to keep certain personal data blocked, which it has processed in order to provide hospitals for the period corresponding to the patient's autonomy rules does not undermine the conclusion that the laboratory is a treatment officer.
13/02/2020
The inclusion of unnecessary data of health in a document of medical derivation, harms the of minimization of the data.
37/2019
A sanitary center issued a document of derivation so that the laboratory practiced to the patient a determinate test|proof. In this document of derivation data related to the health of the affected person that are not necessary or relevant for the practice of this test|proof are included, what constitutes a breach of minimization principle|beginning of the data.
16/12/2019
Communication of identification data of the professionals who access the clinical history of the patients
CNS 53/2019
In general, the owner of the medical record has the right to access the information regarding the traceability of accesses to their medical history, indicating the identity and category of the professionals who have accessed it. For their part, professionals have the right to obtain information about the categories of recipients of their personal data. In this regard, they could be informed, via the intranet or by e-mail, of the access regime applicable to their data and urge them to, if necessary, make aware of the responsible for the concurrence of any personal circumstances that could Restrict access to it whenever appropriate.
18/11/2019
Cession of data of a patient in the tributary Agency within the framework of a procedure of inspection
CNS 41/2019
The data (dates of medical visits, consultations, citations or medical tests carried out and periods of hospitalization) are data of health of the patient affected (art. 4.15 RGPD) and his communication, although not specified the illness or reason of the visit or is subject to the regime of article 9 of RGPD. The Hospital, as the person responsible for the data of the HC of the patient (art. 4.7 GDPR), may request additional information from the tax authorities to the first requirement on the tax obligation which would justify the processing of data to the taxation administration. Similarly, if the data required is not special category data. Given the information available, this authority cannot determine what personal information the patient could have of tax transcendence and, therefore, what data should be communicated to the tax administration.
20/09/2019
Denying access to information about hospital emergency services
IAI 41/2019
Data protection regulations would not prevent the claimant from knowing the identity (name and surname) of the positions of managers referred to by the claimant. Data protection regulations would not prevent access to data of third parties obliged to pay for it, which are legal persons. This information must not include personal data on natural persons, whether the patients themselves or the natural persons who have made the payments.
25/07/2019
Seudonimitzades utilization of health data in biomedical research
CNS 15/2019
The seudonymisades data processing for purposes of biomedical research (section 2.d) of the DA 17th), it can find sufficient habilitation in juridical bases different to that of the consent article 6.1, e sections) and f), and article 9.2, j section), in connection with article 89.1 RGPD). When the foreseen circumstances contribute to the section 2.d) of the DA 17th of the LOPDGDD, the consent of the affected ones will not be indispensable to carry out the data processing of seudonymisades health. The responsible for the treatment has to have the necessary technical and organizational measures, in the terms that they derive from the regulations (articles 9.2.j), 89.1 and 32 RGPD). Among others, it has to give compliment to the foreseen demands in the sections 2.d), f) and g) of the DA 17th of the LOPDGDD.
14/05/2019
Data processing in the research in health
CNS 18/2019
For application of the regulations (art.9.2.j) and art. 89.1 RGPD), the section 2 of the DA 17th is the rule of internal law that regulates the data processing for purposes of research in health, and therefore results from full application to any type of research in health (with the specificities that are foreseen there). The reference to the “public health” contained to the letter b) of the section 2 of the DA 17th, it has to understand made to the research that is carried out within the framework of the LGSP. However, the forecasts of the letters d) f) and g) they have to understand themselves related to any research in health. The information that the responsible incorporates into the corporative web to the effects of complying with the article 13 of the RGPD has to be available in a clear and easily accessible way for the ones affected, during all the lifecycle of the data processing, for demand of the principle of transparency.
14/05/2019
Exercise of rights on the part of minors from the fourteen years
CNS 9/2019
The exercise of rights of informative self-determination for the parents or legal representatives of the biggest minor of 14 years does not require from authorization of this minor, and is not incompatible nor excludes the exercise for the minor himself, since both possibilities are in the regulations of application foreseen in the moment of issuing this report. This, without harm that, in determinate cases, and given the applicable regulations, the interest superior of the minor can found the limitation of the exercise of the rights of informative self-determination on the part of the holders of the parental authority.
06/03/2019
Access to the register of accesses to the clinical history of a dead person
CNS 8/2019
The right of access to l'HC that persons linked to a dead patient exercise (art. 3.1 LOPDGDD), the duty to communicate does not include the identity of the concrete persons who, as a staff typical of the responsible for the treatment, have been able to access l'HC of the deceased. This, without harm that beyond the contents of the law of access, the sanitary center can facilitate this information in a voluntary way.
18/02/2019
Total number of pages: 8