Haga Hospital – €350,000 Fine (Netherlands, 2019)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Haga Hospital in the Netherlands was fined EUR 350,000 for not securing patient records properly. Hospital staff accessed a celebrity's medical records without need, prompting the fine. This highlights the need for strong data security measures in healthcare to protect patient privacy.
What happened
Haga Hospital was fined for inadequate security of patient records, allowing unnecessary access by staff.
Who was affected
Patients at Haga Hospital, including a well-known Dutch person whose records were accessed without necessity.
What the authority found
The Dutch Data Protection Authority fined the hospital for failing to secure patient records adequately.
Why this matters
This case underscores the critical importance of implementing robust security measures in healthcare settings to prevent unauthorized access to sensitive data.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
Original Fine Summary: The Haga Hospital does not have a proper internal security of patient records in place. This is the conclusion of an investigation by the Dutch Data Protection Authority. This investigation followed when it appeared that dozens of hospital staff had unnecessarily checked the medical records of a well-known Dutch person. To force the hospital to improve the security of patient records, the AP simultaneously imposes an order subject to a penalty. If the Haga Hospital has not improved security before 2nd of October 2019, the hospital must pay EUR 100,000 every two weeks, with a maximum of EUR 300,000. The Haga Hospital has meanwhile indicated to take measures. Update: The fine was reduced from EUR 460,000 to EUR 350,000 following a court ruling in 2021.
Related Enforcement Actions (0)
No other enforcement actions found for Haga Hospital in NL
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
18 June 2019
Authority
Autoriteit Persoonsgegevens
Fine Amount
€350,000
Enforcement Tracker ID
ETid-63
About this data
Cite as: Cookie Fines. Haga Hospital - Netherlands (2019). Retrieved from cookiefines.eu
Last updated: