Hospital
€6,900
Insufficient fulfilment of data breach notification obligations
Fecha de la decisión
26 de noviembre de 2024
Autoridad
Polish National Personal Data Protection Office (UODO)
PL
Sector
Health Care
País
DE
Ley
GDPREstado
FINALDescripción
The Polish DPA has fined a district hospital in Września EUR 6,900 for failing to report a data breach to the DPA and data subjects in a timely manner. A patient had accidentally received another individual's medical records and was able to access their personal data.
Citas legales
Art. 33 (1)Art. 34 (1)
Problemas e infracciones
Insufficient fulfilment of data breach notification obligations