German Labor Court Orders Doctor to Pay €1,000 for Unauthorized WhatsApp Health Data Disclosure
The Arbeitsgericht (Labor Court) in Siegburg ruled that a physician who posted a colleague’s medical diagnosis and health status in a hospital‑internal WhatsApp group violated the GDPR and professional confidentiality obligations. The court granted the plaintiff a €1,000 award for immaterial damage, ordered an injunction prohibiting further disclosure, and noted a risk of repeat offences. The judgment emphasizes that informal messenger platforms used in the workplace are fully subject to data‑protection law and that health‑related personal data may only be processed on a lawful basis.
The case highlights the need for clear internal policies on the use of consumer messaging apps in medical settings and serves as a warning that breaches of patient or staff privacy can lead to both injunctive relief and monetary compensation.