Hospital – €105,000 Fine (Germany, 2019)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A German hospital was fined €105,000 for mixing up patient records, leading to billing errors. The investigation found that the hospital had poor technical and organizational systems for managing patient data. This case highlights the importance of strong data management practices in healthcare settings.
What happened
A hospital mixed up patient records, causing incorrect billing and revealing flaws in their data management systems.
Who was affected
Patients whose records were incorrectly handled and billed by the hospital.
What the authority found
The data protection authority fined the hospital for inadequate technical and organizational measures under GDPR Article 32.
Why this matters
This case underscores the need for healthcare providers to ensure robust data management systems to protect patient information. It serves as a reminder that poor data practices can lead to significant fines and operational issues.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 6 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The fine is based on several breaches of the GDPR in connection with a patient mix-up at the admission of the patient. This resulted in incorrect invoicing and revealed structural technical and organisational deficits in the hospital's patient management.
Related Enforcement Actions (0)
No other enforcement actions found for Hospital in DE
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
3 December 2019
Authority
Bundesbeauftragter für den Datenschutz
Fine Amount
€105,000
Enforcement Tracker ID
ETid-122
About this data
Cite as: Cookie Fines. Hospital - Germany (2019). Retrieved from cookiefines.eu
Last updated: