News · European Data Protection Board EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Data Protection Commission announces Final Decision following Inquiry into the Health Service Executive (HSE)

Background informationDate of final decision: 28 August 2026National caseLegal Reference(s): Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)Decision: Administrative fine, Compliance order, Communication order personal data breachKey words: GDPR enforcement, Data subjects rights, Fines, Healt

Personal Data Processing Data Breaches DSA Enforcement Authority Powers and Procedures Supervisory Authorities Supervision Healthcare Notification Obligation
Sep 3, 2026 Source

How it connects

Related across sources

Enforcement VDAI (Lithuania) - 3R-1143 VDAI (Lithuania) Enforcement Midlands Regional Hospital Tullamore, County Offaly: Insufficient technical and organisational measures to ensure information security Data Protection Authority of Ireland Guidance EDPB Annual Report 2025 EDPB Literature If it ain’t broke, don’t fix it? Ten improvements for the upcoming tenth anniversary of the General Data Protection Regulation Computer law & security review Guidance Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) EDPB Guidance EDPB Annual Report 2024 EDPB

Full text

Background informationDate of final decision: 28 August 2026National caseLegal Reference(s): Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)Decision: Administrative fine, Compliance order, Communication order personal data breachKey words: GDPR enforcement, Data subjects rights, Fines, Health and researchSummary of the DecisionOrigin of the case This Inquiry commenced on 24 May 2024 as a result of two personal data breaches notified to the Data Protection Commission (DPC) in October 2023 and November 2023.In both cases, individuals gained unauthorised access to paper records stored and retained in both St. Loman’s Hospital (Mullingar, County Westmeath) and St Conal’s Hospital (Letterkenny, County Donegal). Both locations are former disused psychiatric hospitals.Videos uploaded to s

Original document at the source www.edpb.europa.eu
Related documents