Germany

Hospital

105,000 €

GDPR enforcement action by Data Protection Authority of Rheinland-Pfalz on 2019-12-03.

Rank · Sector

#37

of 270 in Health Care

Rank · Germany

#32

of 116

Rank · All fines

#458

of 3,050

Case details

Authority: Data Protection Authority of Rheinland-Pfalz
Date: 2019-12-03
Controller / Processor: Hospital
Sector: Health Care
Quoted Articles: Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The fine is based on several breaches of the GDPR in connection with a patient mix-up at the admission of the patient. This resulted in incorrect invoicing and revealed structural technical and organisational deficits in the hospital's patient management.

Open original source Links to the regulator's original publication or another source.