Hospital - GDPR and data-protection Fines & Penalties

Enforcement Overview

Hospital has been subject to 9 enforcement actions by European data protection authorities for GDPR and data-protection violations across 6 countries, resulting in cumulative fines of €548,900. As one of the most frequently sanctioned entities in the European GDPR and data-protection enforcement landscape, Hospital's history demonstrates the ongoing scrutiny that large data controllers face across multiple jurisdictions. Enforcement proceedings have been brought by regulators in Malta, Croatia, Belgium and 3 other countries. The authorities involved include Information and Data Protection Commissioner, Agencija za zaštitu osobnih podataka, Autorité de Protection des Données. The most significant penalty was a €200,000 fine issued in 2024.