United Kingdom

Doorstep Dispensaree Ltd. (Pharmacy)

320,000 €

GDPR enforcement action by Information Commissioner (ICO) on 2019-12-17.

Rank · Sector

#23

of 270 in Health Care

Rank · United Kingdom

#18

of 28

Rank · All fines

#287

of 3,042

Case details

Authority: Information Commissioner (ICO)
Date: 2019-12-17
Controller / Processor: Doorstep Dispensaree Ltd. (Pharmacy)
Sector: Health Care
Quoted Articles: Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The company had stored some 500,000 documents containing names, addresses, dates of birth, NHS numbers and medical information and prescriptions in unsealed containers at the back of the building and failed to protect these documents from the elements, resulting in water damage to the documents.

Open original source Links to the regulator's original publication or another source.