- Enforcing jurisdiction
- Estonia · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Azeta.ee e-apteek – €100,000 Fine (Estonia, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Azeta.ee e-apteek was fined EUR 100,000 for allowing third parties to see patients' prescriptions without their consent. This matters because it shows that companies must protect personal information and get permission before sharing it. Failing to do so can lead to serious financial penalties.
What happened
Azeta.ee e-apteek processed personal data, specifically prescriptions, without obtaining consent from the users.
Who was affected
Patients whose prescriptions were visible to others without their permission.
What the authority found
The Estonian DPA ruled that Azeta.ee e-apteek violated GDPR by not ensuring user consent for accessing personal data.
Why this matters
This case highlights the importance of consent in handling personal data. Other online pharmacies should review their practices to avoid similar fines.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 10 March 2026.
Processing notes: entity split needed.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Estonian DPA (Andmekaitse Inspektsioon) fined three online pharmacies EUR 100,000 each for processing personal data without the consent of the data subjects. The data in question are prescriptions for medicines of the data subjects. Third parties were able to view another person's current prescriptions in the e-pharmacy environment without their consent, based only on access to their personal identification code. The DPA highlighted that while it must be possible to purchase prescription drugs for other people, it is the responsibility of the company to ensure that the processing of the personal data required for this purpose only takes place with the consent of the data subjects. The confirmation of another person that they may access the data, however, does not correspond to the voluntary consent of the prescription holder, since the e-pharmacy cannot check whether and for what purpose the consent was given and whether it was given voluntarily.
Related Enforcement Actions (0)
No other enforcement actions found for Azeta.ee e-apteek in EE
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
1 December 2020
Authority
Andmekaitse Inspektsioon
Fine Amount
€100,000
About this data
Cite as: Cookie Fines. Azeta.ee e-apteek - Estonia (2020). Retrieved from cookiefines.eu
Last updated: