ESAEPD02 October 2020EPRIVACY
INSTITUTO DEL DAÑO CEREBRAL Y PSÍQUICO, S.L.
INSTITUTO DEL DAÑO CEREBRAL Y PSÍQUICO, S.L. fined by AEPD 3,000 EUR for delayed access to records and cookie policy deficiencies.
EUR€3,000
Summary
The entity did not provide timely access to clinical records, which constituted a breach of data protection obligations. Deficiencies were also identified in the website's cookie policy, leading the AEPD to impose a fine.
Grounds for the decision
Delayed access to clinical records and deficient cookie policy.