Hellenic Data Protection Authority (HDPA) · 3 August 2022
Private Polyclinic and Diagnostic Centre of Pyle Axiou
Non-compliance with general data processing principles
- Regulator
- Hellenic Data Protection Authority (HDPA)
- Decided
- 3 August 2022
- Country
- Greece
- Sector
- Health Care
- Regulator’s reference
- Not recorded
- Fino case number
- 2022/GR/011
What happened
The Greek DPA fined a medical diagnostics centre €30,000 for violating the principle of integrity and confidentiality by losing images of a data subject's mammogram due to insufficient technical and organisational measures. The DPA reprimanded the diagnostics centre for the data breach and ordered it to communicate the breach to the affected data subjects.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Data principles
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/GR/011.