Hospital
€6,900
Insufficient fulfilment of data breach notification obligations
Decision Date
26 de novembro de 2024
Authority
Polish National Personal Data Protection Office (UODO)
PL
Sector
Health Care
Country
DE
Law
GDPRStatus
FINALDescription
The Polish DPA has fined a district hospital in Września EUR 6,900 for failing to report a data breach to the DPA and data subjects in a timely manner. A patient had accidentally received another individual's medical records and was able to access their personal data.
Legal Citations
Art. 33 (1)Art. 34 (1)
Issues & Violations
Insufficient fulfilment of data breach notification obligations