- Enforcing jurisdiction
- Romania · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Med Life S.A. – €3,000 Fine (Romania, 2023)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Med Life S.A. was fined after sending medical test results to the wrong person via WhatsApp. The Romanian data protection authority found that the company did not take adequate steps to protect personal data. This case underscores the need for strong data protection measures in healthcare.
What happened
Med Life S.A. sent medical test results to the wrong recipient on WhatsApp.
Who was affected
The individual whose medical data was mistakenly shared with unauthorized third parties.
What the authority found
The Romanian authority ruled that Med Life S.A. failed to implement sufficient security measures to protect personal data.
Why this matters
This ruling stresses the importance of data security, especially in healthcare. Companies must ensure they have proper safeguards in place to prevent unauthorized disclosures.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 15 March 2026.
Processing notes: amount discrepancy, entity split needed.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Romanian DPA has imposed a fine of EUR 1,000 on Centrul Medical dr. Furtună Dan. The controller had sent results of a medical test via WhatsApp to the wrong recipient. As a result, personal data of the data subject, such as first and last name, telephone number and medical data, were unauthorizedly disclosed to third parties. The DPA found that the controller had failed to implement adequate technical and organizational measures to protect personal data.
Related Enforcement Actions (0)
No other enforcement actions found for Med Life S.A. in RO
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
16 March 2023
Authority
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
Fine Amount
€3,000
About this data
Cite as: Cookie Fines. Med Life S.A. - Romania (2023). Retrieved from cookiefines.eu
Last updated: