Tietosuojavaltuutetun toimisto (Finland) · 31 May 2022

Pohjois-Savon sairaanhoitopiiri

About: Accountability

FineNo fineViolation found

Regulator: Tietosuojavaltuutetun toimisto (Finland)
Decided: 31 May 2022
Country: Finland
Sector: Not given
Regulator’s reference: 6813/171/21
Fino case number: 2022/FI/017

Export as PDF

What happened

The Finnish DPA ordered a hospital to delete any historical data, location logs, and other employee personal data generated by Windows 10 for Workstations. One of the OS features violated the "data protection by default" principle under Article 25(2) GDPR.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

Art. 25Data protection by design and by default25(2)Read →

Accountability

Sources

The regulator’s decision ↗
GDPRhub ↗

The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.

Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/FI/017.