- Enforcing jurisdiction
- Iceland · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Primary Health Care in the Capital Area – €34,300 Fine (Iceland, 2025)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Primary Health Care in the Capital Area was fined €34,300 for improperly merging medical records and granting access to patient data without consent. This breach of personal and health data highlights the critical need for healthcare providers to follow strict data protection rules. It serves as a reminder that patient privacy must be prioritized.
What happened
The organization was fined for merging medical records and sharing patient data without proper consent.
Who was affected
Patients whose medical records were accessed without their consent.
What the authority found
The Icelandic DPA found that the organization violated GDPR by processing personal and health data without the necessary consent.
Why this matters
This ruling emphasizes the importance of consent in healthcare data sharing and the need for strict adherence to data protection regulations.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 12 March 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Icelandic DPA has imposed a fine of EUR 34,300 on the Primary Health Care in the Capital Area. The controller processed personal and health data in shared medical record systems by merging its medical records with those of other parties and granting them access to its patients' records.
Related Enforcement Actions (0)
No other enforcement actions found for Primary Health Care in the Capital Area in IS
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
17 February 2025
Authority
Persónuvernd
Fine Amount
€34,300
About this data
Cite as: Cookie Fines. Primary Health Care in the Capital Area - Iceland (2025). Retrieved from cookiefines.eu
Last updated: