Aleris Sjukvård AB – €1,168,000 Fine (Sweden, 2020)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Aleris Sjukvård AB was fined over 1 million euros for not protecting patient data properly. The company failed to limit access to sensitive information, allowing employees to see more than they needed for their jobs. This case highlights the importance of securing personal data in healthcare settings.
What happened
Aleris Sjukvård AB did not implement proper security measures, allowing unnecessary access to patient data.
Who was affected
Patients whose confidential data was accessible to employees without a need for such access.
What the authority found
The Swedish DPA found that Aleris Sjukvård AB violated GDPR by not ensuring adequate security and limiting access to patient data.
Why this matters
This case underscores the need for healthcare providers to conduct risk analyses and restrict data access to only those who need it. It serves as a warning to other companies to review their data security practices.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The Swedish DPA (Integritetsskyddsmyndigheten) fined Aleris Sjukvård AB SEK 12,000,000 (EUR 1,168,000) for failing to implement adequate technical and organizational measures to ensure information security. It was found that there was no risk analysis regarding the access to patient data. Authorizations for users of the hospital information system Nationell patientöversikt (NPÖ) were not assigned according to the principle of minimum access. This gave users full access to confidential patient data that they did not need for work purposes.
Related Enforcement Actions (1)
Other enforcement actions involving Aleris Sjukvård AB in SE
Details
Fine Date
3 December 2020
Authority
Integritetsskyddsmyndigheten
Fine Amount
€1,168,000
Enforcement Tracker ID
ETid-467
About this data
Cite as: Cookie Fines. Aleris Sjukvård AB - Sweden (2020). Retrieved from cookiefines.eu
Last updated: