Romania

MED LIFE S.A.

5,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2022-05-24.

Rank · Sector

#182

of 269 in Health Care

Rank · Romania

#72

of 282

Rank · All fines

#1,748

of 3,039

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2022-05-24
Controller / Processor: MED LIFE S.A.
Sector: Health Care
Quoted Articles: Art. 32 (1) b), (2), (4) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Romanian DPA has imposed a fine of EUR 5,000 on MED LIFE S.A.. The company had disposed of documents containing sensitive patient data in a publicly accessible garbage can. An individual had found these documents and filed a complaint with the DPA. During its investigation, the DPA found that MED Life had not taken adequate technical and organizational measures to protect personal data and avoid such incidents.

Open original source Links to the regulator's original publication or another source.