# Company: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Data Protection Authority of Berlin
- Date: 2024-01-01
- Original: https://www.enforcementtracker.com/ETid-2629
- Canonical: https://overview.legal/posts/48744
- Topics: Data Breaches, Security, Healthcare, Privacy by Design & Default, Healthcare, Processing Agreement, Health Data, Supervisory Authorities

## Summary

The DPA of Berlin imposed a fine of EUR 60,000 on a healthcare company. The company offers practice management software that includes a patient communication portal with insufficient technical and organizational measures to ensure data protection. The total amount of the fine was reduced because no data breach was found and the company cooperated with the DPA.

## Full text

The DPA of Berlin imposed a fine of EUR 60,000 on a healthcare company. The company offers practice management software that includes a patient communication portal with insufficient technical and organizational measures to ensure data protection. The total amount of the fine was reduced because no data breach was found and the company cooperated with the DPA.

GDPR Articles: Unknown
Industry: Health Care

---
Generated by overview.legal · https://overview.legal/posts/48744 · 2026-08-22