# Magdeburg University Hospital: Insufficient fulfilment of data breach notification obligations

- Type: Enforcement
- Source: Data Protection Authority of Sachsen-Anhalt
- Date: 2023-01-01
- Original: https://www.enforcementtracker.com/ETid-1617
- Canonical: https://overview.legal/posts/47732
- Topics: Notification Obligation, Data Breaches, Notified Body Reporting and Notification Obligations, Article 19 GDPR - Notification of Rectification, Erasure or Restriction, Healthcare, Healthcare, Personal Data, Education, Processing Agreement, Supervisory Authorities

## Summary

The DPA of Sachsen-Anhalt has imposed a fine of EUR 9,000 on Magdeburg University Hospital. The clinic had failed to report to the DPA a data breach involving a former employee having unlawfully disclosed personal data from the clinic's systems to third parties.

## Full text

The DPA of Sachsen-Anhalt has imposed a fine of EUR 9,000 on Magdeburg University Hospital. The clinic had failed to report to the DPA a data breach involving a former employee having unlawfully disclosed personal data from the clinic's systems to third parties.

GDPR Articles: Art. 33 GDPR
Industry: Health Care

---
Generated by overview.legal · https://overview.legal/posts/47732 · 2026-08-22