Hospital
€105,000
Insufficient technical and organisational measures to ensure information security
Dato for beslutning
3. december 2019
Myndighed
Data Protection Authority of Rheinland-Pfalz
DE
Sektor
Health Care
Land
DE
Lovgivning
GDPRStatus
FINALBeskrivelse
The fine is based on several breaches of the GDPR in connection with a patient mix-up at the admission of the patient. This resulted in incorrect invoicing and revealed structural technical and organisational deficits in the hospital's patient management.
Juridiske citater
Art. 32
Problemer og overtrædelser
Insufficient technical and organisational measures to ensure information security