The Finnish Data Protection Authority imposed a EUR 33,000 fine on a healthcare company

The full text of the decision in the Judykatura database shows why tracking technologies in an online healthcare appointment booking service require an assessment going far beyond the cookie banner itself. The full text of the decision in the Judykatura database presents reasoning that combines technical data with information concerning the search for therapy and the booking of healthcare services. The authority found that the controller had failed to ensure appropriate security, data protection by design and data protection by default.


The rest of this analysis, all theses and the full text of the ruling are available with an AKTUALNOŚCI PLUS subscription.

Find out how EU supervisory authorities, administrative and civil courts and the CJEU reason their decisions — and keep your organisation aligned with current case law.

Join — see pricing   Have an account? Log in

Wersja polska / Polish version