GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Archbishop Makarios III Hospital

Country
Cyprus
Fine
15,000 EUR
Date
2018-11-07
Sector
Hospital/Heath Industry
Articles
Articles 15, 24 and 32 of the GDPR

Loss of patient file by the hospital

The patient complained to the Commissioner about the lack of protection of personal data. The complainant did not have access to her medical file from the Archbishop Makarios III Hospital because the file could not be found by the data controller. Following the investigation of the case, the Data Protection Authority imposed an administrative fine of €5,000 on the Archbishop Makarios III Hospital for the loss of a medical file. Authority: Hospital/Heath Industry