Details:

Summary The DPA of Sachsen-Anhalt has imposed a fine of EUR 9,000 on Magdeburg University Hospital. The clinic had failed to report to the DPA a data breach involving a former employee having unlawfully disclosed personal data from the clinic’s systems to third parties.
Link: link
Related articles:  Art. 33 GDPR
Type: Insufficient fulfilment of data breach notification obligations
Fine: EUR 9,000
Sector Health Care

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law