Except this person doesnt seem to have been able to give informed consent, which is what German Law is actually looking for. European employment law is much more on the side of employees than in the US, where your comment's nihilism would make me guess you're located... Most GDPR infractions given have been around this exact sort of noncensensual recording and I think the GP comment should be contacting their data protection office or seeking guidance from their company CPO.