- Enforcing jurisdiction
- Germany · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Company – €60,000 Fine (Germany, 2024)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A healthcare company was fined EUR 60,000 for having weak security measures in its patient communication portal. The company cooperated with the investigation, which led to a reduced fine. This case shows that companies must prioritize data protection in their software solutions.
What happened
The DPA of Berlin fined a healthcare company for insufficient technical and organizational measures to protect patient data.
Who was affected
Patients using the company's communication portal were affected by the security weaknesses.
What the authority found
The authority found that the company did not implement adequate data protection measures, violating data protection rules.
Why this matters
This ruling highlights the need for healthcare companies to invest in strong data protection for their software. Businesses should regularly assess their security measures to protect sensitive information.
Source checks
Linked-source text retrieved.
Automated check recorded — 12 March 2026.
Processing notes: articles corrected, national law identified, authority corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The DPA of Berlin imposed a fine of EUR 60,000 on a healthcare company. The company offers practice management software that includes a patient communication portal with insufficient technical and organizational measures to ensure data protection. The total amount of the fine was reduced because no data breach was found and the company cooperated with the DPA.
Related Enforcement Actions (13)
Other enforcement actions involving Company in DE
Fine
€60K
Details
Fine Date
1 January 2024
Authority
Bundesbeauftragter für den Datenschutz
Fine Amount
€60,000
About this data
Cite as: Cookie Fines. Company - Germany (2024). Retrieved from cookiefines.eu
Last updated: