Denmark

Danish National Genome Center

6,700 €

GDPR enforcement action by Danish Data Protection Authority (Datatilsynet) on 2022-03-25.

Rank · Sector

#165

of 270 in Health Care

Rank · Denmark

#26

of 29

Rank · All fines

#1,580

of 3,050

Case details

Authority: Danish Data Protection Authority (Datatilsynet)
Date: 2022-03-25
Controller / Processor: Danish National Genome Center
Sector: Health Care
Quoted Articles: Art. 36 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Danish DPA has imposed a fine of EUR 6,700 on the Danish National Genome Center.
The center had conducted a data protection impact assessment that revealed circumstances that could pose a high risk to the rights of data subjects.

The DPA imposed the fine because the center had processed personal data without first consulting the DPA, even though the impact assessment had revealed a high risk to data subjects. The center has complied with all the DPA's requests and has shown good cooperation with the authority.

Open original source Links to the regulator's original publication or another source.