Capio St. Göran AB – €2,900,000 Fine (Sweden, 2020)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Capio St. Göran AB was fined nearly 3 million euros for not securing patient data properly. Employees had access to more patient information than necessary, which could lead to privacy breaches. This action stresses the need for strict data access controls in healthcare.
What happened
Capio St. Göran AB failed to limit employee access to patient data, compromising information security.
Who was affected
Patients whose sensitive information was accessible to employees without a justified need.
What the authority found
The Swedish DPA ruled that Capio St. Göran AB breached GDPR by not implementing adequate security measures to protect patient data.
Why this matters
This fine highlights the critical importance of data protection in healthcare, urging companies to enforce strict access controls and conduct thorough risk assessments.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The Swedish DPA (Integritetsskyddsmyndigheten) fined Capio St. Göran AB SEK 30,000,000 (EUR 2,900,000) for failing to implement adequate technical and organizational measures to ensure information security. It was found that there was no risk analysis regarding the access to patient data. Authorizations for users of the hospital information systems Cosmic, Nationell patientöversikt and TakeCare were not assigned according to the principle of minimum access. This gave users full access to confidential patient data that they did not need for work purposes.
Related Enforcement Actions (0)
No other enforcement actions found for Capio St. Göran AB in SE
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
3 December 2020
Authority
Integritetsskyddsmyndigheten
Fine Amount
€2,900,000
Enforcement Tracker ID
ETid-473
About this data
Cite as: Cookie Fines. Capio St. Göran AB - Sweden (2020). Retrieved from cookiefines.eu
Last updated: