Danish National Genome Center
Insufficient technical and organisational measures to ensure information security
Date de décision
25 mars 2022
Autorité
Danish Data Protection Authority (Datatilsynet)
DK
Secteur
Health Care
Pays
DK
Droit
GDPRStatut
FINALDescription
The Danish DPA has imposed a fine of EUR 6,700 on the Danish National Genome Center. The center had conducted a data protection impact assessment that revealed circumstances that could pose a high risk to the rights of data subjects. The DPA imposed the fine because the center had processed personal data without first consulting the DPA, even though the impact assessment had revealed a high risk to data subjects. The center has complied with all the DPA's requests and has shown good cooperation with the authority.