Danish National Genome Center
€6,700
Insufficient technical and organisational measures to ensure information security
Decision Date
March 25, 2022
Authority
Danish Data Protection Authority (Datatilsynet)
DK
Sector
Health Care
Country
DK
Law
GDPRStatus
FINALDescription
The Danish DPA has imposed a fine of EUR 6,700 on the Danish National Genome Center. The center had conducted a data protection impact assessment that revealed circumstances that could pose a high risk to the rights of data subjects. The DPA imposed the fine because the center had processed personal data without first consulting the DPA, even though the impact assessment had revealed a high risk to data subjects. The center has complied with all the DPA's requests and has shown good cooperation with the authority.
Legal Citations
Art. 36
Issues & Violations
Insufficient technical and organisational measures to ensure information security