Doorstep Dispensaree Ltd. (Pharmacy)
- Country
- United Kingdom
- Fine
- 320,000 GBP
- Date
- 2019-12-20
- Sector
- Medical
- Articles
- Art 32 GDPR
Monetary fine for failure to provide adequate physical security arrangements to protects its customers' personal data as per Art 32 GDPR
The company had stored approximately 500,000 documents containing names, addresses, dates of birth, NHS numbers and medical information and prescriptions in unsealed containers at the back of the building. The company failed to protect these documents from the elements, resulting in water damage to the documents in breach of Art.32 GDPR