Ireland

Cork University Maternity Hospital

65,000 €

GDPR enforcement action by Data Protection Authority of Ireland on 2020-08-18.

Rank · Sector

#54

of 270 in Health Care

Rank · Ireland

#27

of 36

Rank · All fines

#605

of 3,042

Case details

Authority: Data Protection Authority of Ireland
Date: 2020-08-18
Controller / Processor: Cork University Maternity Hospital
Sector: Health Care
Quoted Articles: Art. 5 GDPR, Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The „Data Protection Authority of Ireland“ imposed a fine on Cork University Maternity Hospital (CUMH) after the personal data of 78 patients was discovered disposed of in a public recycling center. Among the documents disposed of, some contain special category personal data of six patients. It is believed that the breach at CUMH involves sensitive patient health data such as the medical history and future planned care programs.

Open original source Links to the regulator's original publication or another source.