Enforcing jurisdiction
Denmark · Geography does not establish applicable law.
Confirmed applicable legislation
No confirmed legal basis recorded.
Privacy topics

Medicals Nordic I/S – €80,700 Fine (Denmark, 2021)

€80,700Datatilsynet (Denmark)9 July 2021Denmark
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

Medicals Nordic I/S was fined for improperly using WhatsApp to share confidential information about citizens. This is important because it emphasizes the need for businesses to handle sensitive data securely and limit access to authorized personnel only.

What happened

Medicals Nordic I/S used WhatsApp groups to share confidential health data about citizens being tested.

Who was affected

Citizens whose confidential health information was shared with unauthorized employees of Medicals Nordic I/S.

What the authority found

The Danish DPA determined that Medicals Nordic I/S failed to protect sensitive information, violating data protection rules.

Why this matters

This ruling serves as a reminder for companies to ensure that their communication practices protect sensitive data from unauthorized access.

Source checks

Linked-source text retrieved.

Automated check recorded — 10 March 2026.

Processing notes: articles corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Danish DPA (Datatilsynet) has fined Medicals Nordic I/S EUR 80,700. In January 2021, the DPA became aware that Medicals Nordic was using WhatsApp to transmit confidential information and health data about citizens being tested in the company's test centres. All employees working in a test centre were invited to a WhatsApp group associated with the test centre. The members of these WhatsApp groups received all the messages transmitted by other employees in the groups. The employees shared confidential information about citizens to the company's central administration through those WhatsApp groups. This meant that employees who, did not have a work-related need to process information - which other employees had to transmit to the central administration - nevertheless received the information, which included, inter alia, personal identity numbers and health data of citizens.

Related Enforcement Actions (0)

No other enforcement actions found for Medicals Nordic I/S in DK

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

9 July 2021

Authority

Datatilsynet (Denmark)

Fine Amount

€80,700

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Medicals Nordic I/S - Denmark (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: