- Enforcing jurisdiction
- Netherlands · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Orthodontic Clinic – €12,000 Fine (Netherlands, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
An orthodontic clinic in the Netherlands was fined EUR 12,000 for using an unsecured web form to collect sensitive patient information. This is significant because it highlights the need for businesses to protect personal data, especially when dealing with children.
What happened
The clinic collected personal data from new patients through a web form that was sent over an unencrypted connection.
Who was affected
The patients, mostly children, who submitted their personal information through the clinic's web form.
What the authority found
The authority ruled that the clinic violated GDPR by not securing the personal data collected from patients.
Why this matters
This ruling stresses the importance of data security for businesses, particularly in healthcare, and sets a standard for how patient information should be handled online.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 13 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Dutch DPA (AP) has fined an orthodontic clinic EUR 12,000. The web form that new patients used to sign up contained mandatory fields for all sorts of patient personal data. The data that the patients (mostly children) entered into the form was then sent to the orthodontic clinic via an unencrypted - and thus unsecured - connection. This presented the risk of unauthorized third parties accessing the personal data of the data subjects.
Related Enforcement Actions (0)
No other enforcement actions found for Orthodontic Clinic in NL
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
4 February 2021
Authority
Autoriteit Persoonsgegevens
Fine Amount
€12,000
Enforcement Tracker ID
ETid-725
About this data
Cite as: Cookie Fines. Orthodontic Clinic - Netherlands (2021). Retrieved from cookiefines.eu
Last updated: