Enforcing jurisdiction
Germany · Geography does not establish applicable law.
Confirmed applicable legislation
No confirmed legal basis recorded.
Privacy topics

Magdeburg University Hospital – €9,000 Fine (Germany, 2023)

€9,000Bundesbeauftragter für den Datenschutz1 January 2023Germany
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

Magdeburg University Hospital was fined EUR 9,000 for not reporting a data breach involving a former employee. The breach allowed personal data to be unlawfully shared with third parties. This ruling emphasizes the need for organizations to promptly report data breaches.

What happened

The hospital failed to report a data breach where personal data was disclosed by a former employee.

Who was affected

Patients whose personal data was unlawfully disclosed by the former employee.

What the authority found

The authority determined that the hospital did not comply with the requirement to report the data breach.

Why this matters

This case serves as a reminder for healthcare providers to have robust data breach reporting procedures in place. Timely reporting is crucial to protect patient privacy.

Recorded legal citations
Automatically processed
Art. 33 GDPR
View original scraped data
Art. 33(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 14 March 2026.

Processing notes: authority corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The DPA of Sachsen-Anhalt has imposed a fine of EUR 9,000 on Magdeburg University Hospital. The clinic had failed to report to the DPA a data breach involving a former employee having unlawfully disclosed personal data from the clinic's systems to third parties.

Related Enforcement Actions (0)

No other enforcement actions found for Magdeburg University Hospital in DE

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

1 January 2023

Authority

Bundesbeauftragter für den Datenschutz

Fine Amount

€9,000

Enforcement Tracker ID

ETid-1617

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Magdeburg University Hospital - Germany (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: