Skip to content
Enforcement · Icelandic data protection authority ('Persónuvernd') EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

National Center of Addiction Medicine ('SAA'): Insufficient technical and organisational measures to ensure information security

€20,600 Fine
National Center of Addiction Medicine ('SAA')
ICELAND
Art. 5 GDPR Art. 32 GDPR

How it connects

Full text

Persónuvernd noted that a former employee of the SAA received boxes of allegedly personal belongings that he had left there, but which also contained patient data, including the health records of 252 former patients and documents with the names of about 3,000 people who had participated in rehabilitation for alcohol and drug abuse.

Industry: Health Care

Similar Content