Hospital: Insufficient technical and organisational measures to ensure information security

€105,000 fine - Data Protection Authority of Rheinland-Pfalz

€105,000 Fine

Hospital

GERMANY

Insufficient technical and organisational measures to ensure information security

Dec 3, 2019 Source

Content

The fine is based on several breaches of the GDPR in connection with a patient mix-up at the admission of the patient. This resulted in incorrect invoicing and revealed structural technical and organisational deficits in the hospital's patient management.

GDPR Articles: Art. 32 GDPR
Industry: Health Care