Germany

Physician

1,000 €

GDPR enforcement action by Data Protection Authority of Hamburg on 2022.

Rank · Sector

#255

of 270 in Health Care

Rank · Germany

#95

of 116

Rank · All fines

#2,653

of 3,042

Case details

Authority: Data Protection Authority of Hamburg
Date: 2022
Controller / Processor: Physician
Sector: Health Care
Quoted Articles: Art. 32 (1) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

A physician's office had disposed of records of positive and negative Covid-19 Antigen Rapid test results from patients in a public waste disposal site.

Open original source Links to the regulator's original publication or another source.