University medical center fined for patient mix-up
The University Medicine of the Johannes Gutenberg University in Rhineland-Palatinate (Germany) received a GDPR fine of 105,000€. This penalty was imposed after the hospital violated the GDPR multiple times during a patient mix-up. According to the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, this penalty should also have another purpose. It is intended to show hospitals and other institutions that work with sensitive health data that malpractice is being consistently investigated.
Art des Verstoßes:
inadequate data protection
Waren sensible Daten betroffen?:
Violation of GDPR Paragraph:
6. Lawfulness of processing
9. Processing of special categories of personal data