Hospital
€105,000
Insufficient technical and organisational measures to ensure information security
Fecha de la decisión
3 de diciembre de 2019
Autoridad
Data Protection Authority of Rheinland-Pfalz
DE
Sector
Health Care
País
DE
Ley
GDPREstado
FINALDescripción
The fine is based on several breaches of the GDPR in connection with a patient mix-up at the admission of the patient. This resulted in incorrect invoicing and revealed structural technical and organisational deficits in the hospital's patient management.
Citas legales
Art. 32
Problemas e infracciones
Insufficient technical and organisational measures to ensure information security