Hospital
€105,000
Insufficient technical and organisational measures to ensure information security
Datum der Entscheidung
3. Dezember 2019
Behörde
Data Protection Authority of Rheinland-Pfalz
DE
Sektor
Health Care
Land
DE
Recht
GDPRStatus
FINALBeschreibung
The fine is based on several breaches of the GDPR in connection with a patient mix-up at the admission of the patient. This resulted in incorrect invoicing and revealed structural technical and organisational deficits in the hospital's patient management.
Juristische Zitate
Art. 32
Probleme und Verstöße
Insufficient technical and organisational measures to ensure information security