Centro Hospitalar Barreiro Montijo, EPE
- Country
- Portugal
- Fine
- 400,000 EUR
- Date
- 2018-10-09
- Sector
- Public Sector
- Articles
- Art. 5 (1) f) GDPRArt. 32 GDPR
Insufficient technical and organisational measures to ensure information security and violation of the data minimization principle
The public hospital violated the principle of data minimization by granting access to an excessive amount of data and violated the obligation to take appropriate organizational and technical measures. Authority: Portuguese Data Protection Authority (CNPD)
Source: https://www.cnpd.pt/bin/decisoes/Delib/20_984_2018.pdf
Reported by: Abreu Advogados