Hospital
€6,900
Insufficient fulfilment of data breach notification obligations
Date de décision
26 novembre 2024
Autorité
Polish National Personal Data Protection Office (UODO)
PL
Secteur
Health Care
Pays
DE
Droit
GDPRStatut
FINALDescription
The Polish DPA has fined a district hospital in Września EUR 6,900 for failing to report a data breach to the DPA and data subjects in a timely manner. A patient had accidentally received another individual's medical records and was able to access their personal data.
Citations légales
Art. 33 (1)Art. 34 (1)
Questions et violations
Insufficient fulfilment of data breach notification obligations