Sanction RGPD Polish National Personal Data Protection Office (UODO) — Hospital : 7 k€ (2024)
- Autorité de contrôle
- Polish National Personal Data Protection Office (UODO)
- Pays
- Pologne
- Entreprise / secteur
- Hospital
- Montant de l'amende
- 7 k€
- Date de la décision
- 26 novembre 2024
- Fondement juridique
- Art. 33 (1), Art. 34 (1), (2)
- Manquement
- Manquement à la notification de violation de données
Résumé des faits
The Polish DPA has fined a district hospital in Września EUR 6,900 for failing to report a data breach to the DPA and data subjects in a timely manner. A patient had accidentally received another individual's medical records and was able to access their personal data.