Hospital
€105,000
Insufficient technical and organisational measures to ensure information security
Data della decisione
3 dicembre 2019
Autorità
Data Protection Authority of Rheinland-Pfalz
DE
Settore
Health Care
Paese
DE
Legge
GDPRStato
FINALDescrizione
The fine is based on several breaches of the GDPR in connection with a patient mix-up at the admission of the patient. This resulted in incorrect invoicing and revealed structural technical and organisational deficits in the hospital's patient management.
Citazioni legali
Art. 32
Problemi e violazioni
Insufficient technical and organisational measures to ensure information security