Enforcing jurisdiction
Germany · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Universitätsmedizin der Johannes-Gutenberg-Universität Mainz – €105,000 Fine (Germany, 2019)

€105,000DPA LFDI30 September 2019Germany
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A hospital in Mainz was fined for mixing up patient information during admissions, leading to incorrect billing. This matters because it highlights the importance of proper data management in healthcare to protect patient privacy.

What happened

Universitätsmedizin der Johannes-Gutenberg-Universität Mainz had issues with patient admission processes that resulted in incorrect invoicing.

Who was affected

Patients whose personal data was mishandled during the admission process were affected.

What the authority found

The DPA found that the hospital had serious problems with managing personal data, violating GDPR rules on data protection.

Why this matters

This case emphasizes that healthcare providers must ensure strong data protection practices. Other hospitals should review their data management systems to avoid similar issues.

Recorded legal citations
Automatically processed
Art. 5 GDPR
Art. 32 GDPR
View original scraped data
Art. 5 GDPR
Art. 32 GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 6 March 2026.

Processing notes: articles corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The LfDI announced that a hospital had mix-ups during patient admission, which lead to incorrect invoicing practices. An investigation revealed structural technical and organisational deficits in the management of patients’ personal data and severe violations of the GDPR. The DPA recognised the efforts that the hospital is planning to put to improve its data protection management.

Related Enforcement Actions (0)

No other enforcement actions found for Universitätsmedizin der Johannes-Gutenberg-Universität Mainz in DE

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

30 September 2019

Authority

DPA LFDI

Fine Amount

€105,000

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Universitätsmedizin der Johannes-Gutenberg-Universität Mainz - Germany (2019). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: