DSB (Austria) · 9 June 2026
Albin D. · Relief organization (employer)
The source names these parties without saying which one the decision is about. I’m checking it.
About: Data principles, Special categories, Unlawful processing
Fine€1,200Violation found
- Regulator
- DSB (Austria)
- Decided
- 9 June 2026
- Country
- Austria
- Sector
- Not given
- Regulator’s reference
- 2026-0.483.002
- Fino case number
- 2026/AT/013
What happened
The DPA fined a medical services employee €1,200 for photographing two patients and sharing the images with unauthorised third parties because they contained health data under Article 9(1) GDPR.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 4Definitions4(15) · 4(2) · 4(7)Read →
- Art. 5Principles relating to processing of personal data5(1)(a) · 5(1)(b)Read →
- Art. 6Lawfulness of processing6(1)Read →
- Art. 9Processing of special categories of personal data9(2)Read →
- Art. 83General conditions for imposing administrative fines83(2)(a) · 83(2)(b) · 83(2)(e) · 83(2)(f) · 83(2)(g) · 83(2)(k) · 83(3) · 83(5)(a)Read →
- Data principles
- Special categories
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Thank you for telling me: write to hello@finoprivacy.com and quote 2026/AT/013.