Hospital
€105,000
Insufficient technical and organisational measures to ensure information security
Datum odločitve
3. december 2019
Organ
Data Protection Authority of Rheinland-Pfalz
DE
Sektor
Health Care
Država
DE
Zakon
GDPRStatus
FINALOpis
The fine is based on several breaches of the GDPR in connection with a patient mix-up at the admission of the patient. This resulted in incorrect invoicing and revealed structural technical and organisational deficits in the hospital's patient management.
Pravne navedbe
Art. 32
Vprašanja in kršitve
Insufficient technical and organisational measures to ensure information security