GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Dutch DPA

Country
Netherlands
Fine
12,000 EUR
Date
2021-06-10
Sector
Healthcare
Articles
Art. 32(1) GDPR

The orthodontic practice is fined because new patients could register via an unsecured website.

AP Vice-President Monique Verdier: 'When you register with an orthodontist, you provide a combination of personal data in confidence. These data are necessary for orthodontic practice, but are also very interesting for criminals. Taking good care of your patients also means taking good care of your patients' personal data. That does not only apply to large healthcare organisations, but also applies to every healthcare provider.'