- Enforcing jurisdiction
- Norway · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Østfold HF Hospital – €112,000 Fine (Norway, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Norway's Datatilsynet fined Østfold HF Hospital for failing to protect patient data properly. This is crucial because it underscores the need for healthcare providers to secure sensitive information. The hospital did not control access to folders containing patient data from 2013 to 2019.
What happened
Østfold HF Hospital was found to have inadequately protected sensitive patient data.
Who was affected
Patients whose sensitive health information was stored without proper access controls.
What the authority found
The authority determined that the hospital did not take sufficient measures to safeguard personal data, violating GDPR requirements.
Why this matters
This ruling stresses the importance of data security in healthcare and serves as a warning to other hospitals to improve their data protection practices.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Automated check recorded — 6 March 2026.
Processing notes: national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
It was found that Østfold HF Hospital had stored patient data, including sensitive data such as the reason for hospitalisation, during the period 2013-2019 without controlling access to the folders where the data was stored. Datatilsynet therefore decided that the hospital had not taken sufficient technical and organisational measures to protect personal data and was therefore in breach of the GDPR and the Patient Records Act.
Related Enforcement Actions (0)
No other enforcement actions found for Østfold HF Hospital in NO
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
22 June 2020
Authority
Datatilsynet (Norway)
Fine Amount
€112,000
Enforcement Tracker ID
ETid-321
About this data
Cite as: Cookie Fines. Østfold HF Hospital - Norway (2020). Retrieved from cookiefines.eu
Last updated: