Physician
€1,000
Insufficient technical and organisational measures to ensure information security
Decision Date
January 1, 2022
Authority
Data Protection Authority of Hamburg
DE
Sector
Health Care
Country
IT
Law
GDPRStatus
FINALDescription
A physician's office had disposed of records of positive and negative Covid-19 Antigen Rapid test results from patients in a public waste disposal site.
Legal Citations
Art. 32 (1)
Issues & Violations
Insufficient technical and organisational measures to ensure information security