Germany

Company

60,000 €

GDPR enforcement action by Data Protection Authority of Berlin on 2024.

Rank · Sector

#58

of 270 in Health Care

Rank · Germany

#38

of 116

Rank · All fines

#649

of 3,050

Case details

Authority: Data Protection Authority of Berlin
Date: 2024
Controller / Processor: Company
Sector: Health Care
Quoted Articles: Unknown
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The DPA of Berlin imposed a fine of EUR 60,000 on a healthcare company. The company offers practice management software that includes a patient communication portal with insufficient technical and organizational measures to ensure data protection. The total amount of the fine was reduced because no data breach was found and the company cooperated with the DPA.

Open original source Links to the regulator's original publication or another source.