Danish National Genome Center
Insufficient technical and organisational measures to ensure information security
Beslissingsdatum
25 maart 2022
Autoriteit
Danish Data Protection Authority (Datatilsynet)
DK
Sector
Health Care
Land
DK
Wet
GDPRStatus
FINALBeschrijving
The Danish DPA has imposed a fine of EUR 6,700 on the Danish National Genome Center. The center had conducted a data protection impact assessment that revealed circumstances that could pose a high risk to the rights of data subjects. The DPA imposed the fine because the center had processed personal data without first consulting the DPA, even though the impact assessment had revealed a high risk to data subjects. The center has complied with all the DPA's requests and has shown good cooperation with the authority.