Doorstep Dispensaree Ltd. (Pharmacy)
€320,000
Insufficient technical and organisational measures to ensure information security
Decision Date
December 17, 2019
Authority
Information Commissioner (ICO)
GB
Sector
Health Care
Country
GB
Law
GDPRStatus
FINALDescription
The company had stored some 500,000 documents containing names, addresses, dates of birth, NHS numbers and medical information and prescriptions in unsealed containers at the back of the building and failed to protect these documents from the elements, resulting in water damage to the documents.
Legal Citations
Art. 32
Issues & Violations
Insufficient technical and organisational measures to ensure information security