Romania

MED LIFE S.A.

5,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2022-05-24.

Rank · Sector

#183

of 270 in Health Care

Rank · Romania

#73

of 283

Rank · All fines

#1,758

of 3,050

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2022-05-24
Controller / Processor: MED LIFE S.A.
Sector: Health Care
Quoted Articles: Art. 32 (1) b), (2), (4) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Romanian DPA has imposed a fine of EUR 5,000 on MED LIFE S.A.. The company had disposed of documents containing sensitive patient data in a publicly accessible garbage can. An individual had found these documents and filed a complaint with the DPA. During its investigation, the DPA found that MED Life had not taken adequate technical and organizational measures to protect personal data and avoid such incidents.

Open original source Links to the regulator's original publication or another source.