Hospital
€105,000
Insufficient technical and organisational measures to ensure information security
Date de décision
3 décembre 2019
Autorité
Data Protection Authority of Rheinland-Pfalz
DE
Secteur
Health Care
Pays
DE
Droit
GDPRStatut
FINALDescription
The fine is based on several breaches of the GDPR in connection with a patient mix-up at the admission of the patient. This resulted in incorrect invoicing and revealed structural technical and organisational deficits in the hospital's patient management.
Citations légales
Art. 32
Questions et violations
Insufficient technical and organisational measures to ensure information security