# Cork University Maternity Hospital: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Data Protection Authority of Ireland
- Date: 2020-08-18
- Original: https://www.enforcementtracker.com/ETid-449
- Canonical: https://overview.legal/posts/46564
- Topics: Healthcare, Health Data, Healthcare, Security, Personal Data, Special Categories of Data, Education, Types of Special Categories of Personal Data, Supervisory Authorities

## Summary

The „Data Protection Authority of Ireland“ imposed a fine on Cork University Maternity Hospital (CUMH) after the personal data of 78 patients was discovered disposed of in a public recycling center. Among the documents disposed of, some contain special category personal data of six patients. It is believed that the breach at CUMH involves sensitive patient health data such as the medical history and future planned care programs.

## Full text

The „Data Protection Authority of Ireland“ imposed a fine on Cork University Maternity Hospital (CUMH) after the personal data of 78 patients was discovered disposed of in a public recycling center. Among the documents disposed of, some contain special category personal data of six patients. It is believed that the breach at CUMH involves sensitive patient health data such as the medical history and future planned care programs.

GDPR Articles: Art. 5 GDPR, Art. 32 GDPR
Industry: Health Care

---
Generated by overview.legal · https://overview.legal/posts/46564 · 2026-08-22