Physician
€3,600
Insufficient technical and organisational measures to ensure information security
Decision Date
January 1, 2023
Authority
Data Protection Authority of Hessen
DE
Sector
Health Care
Country
IT
Law
GDPRStatus
FINALDescription
A physician's office had disposed of records containing patient data in a public waste disposal site.
Legal Citations
Art. 5 (1)Art. 32 (1)
Issues & Violations
Insufficient technical and organisational measures to ensure information security