Enforcement · Icelandic data protection authority ('Persónuvernd') EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Heilsuveru: Insufficient technical and organisational measures to ensure information security

€81,000 Fine
Heilsuveru
ICELAND
Art. 5 GDPR Art. 25 GDPR Art. 32 GDPR
Data Breaches Security Privacy by Design & Default Healthcare Personal Data Controllers Processing Agreement Supervisory Authorities
Jul 3, 2023 Source

How it connects

Related across sources

News De Deense beschermingsautoriteit (SA) heeft verklaard dat het gebruik van Google Analytics onrechtmatig is zonder aanvullende maatregelen. Datatilsynet Guidance EDPB Annual Report 2021 EDPB Case Law HvJ EU: Privacy Shield ongeldig verklaard (Schrems II) Hof van Justitie EU Guidance EDPB Annual Report 2019 EDPB Literature If it ain’t broke, don’t fix it? Ten improvements for the upcoming tenth anniversary of the General Data Protection Regulation Computer law & security review Guidance Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) EDPB

Full text

The Icelandic DPA has fined Heilsuveru EUR 81,000. The controller had reported a data breach to the DPA, as two unauthorized persons had managed to view personal data. During its investigation, the DPA found that the controller had failed to implement appropriate technical and organizational measures to protect personal data.

Industry: Health Care

Original document at the source www.personuvernd.is

Similar Content