- Enforcing jurisdiction
- Germany · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Covid-19 test center – €2,700 Fine (Germany, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A Covid-19 test center was fined EUR 2,700 for sending unencrypted emails that exposed test results. The authority found that the center failed to protect sensitive information, putting individuals' privacy at risk. This ruling underscores the importance of securing personal data in communication.
What happened
A Covid-19 test center sent unencrypted emails containing links to test results, risking unauthorized access to sensitive information.
Who was affected
Individuals who received test results via unencrypted emails, potentially exposing their personal health information.
What the authority found
The authority ruled that the test center violated data protection rules by not implementing adequate security measures for personal data.
Why this matters
This case stresses the need for organizations to adopt strong security practices when handling personal health information. Companies should ensure that sensitive data is protected during communication.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 15 March 2026.
Processing notes: authority corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The DPA of Hamburg has imposed a fine of EUR 2,700 on a Covid-19 test center. The test center had send the data subjects an unencrypted e-mail containing a URL that allowed them to access the test result without taking any further security measures. In some cases, the download link was structured in a way that led to the download of a PDF file with the file name corresponding to the last name of the person tested. With knowledge of the directory path, it was therefore possible to view third-party test results.
Related Enforcement Actions (1)
Other enforcement actions involving Covid-19 test center in DE
Details
Fine Date
1 January 2022
Authority
Bundesbeauftragter für den Datenschutz
Fine Amount
€2,700
About this data
Cite as: Cookie Fines. Covid-19 test center - Germany (2022). Retrieved from cookiefines.eu
Last updated: