Hospital
€105,000
Insufficient technical and organisational measures to ensure information security
Dato for beslutning
3. desember 2019
Myndighet
Data Protection Authority of Rheinland-Pfalz
DE
Sektor
Health Care
Land
DE
Lov og rett
GDPRStatus
FINALBeskrivelse
The fine is based on several breaches of the GDPR in connection with a patient mix-up at the admission of the patient. This resulted in incorrect invoicing and revealed structural technical and organisational deficits in the hospital's patient management.
Juridiske henvisninger
Art. 32
Problemer og overtredelser
Insufficient technical and organisational measures to ensure information security