State Hospital
- Country
- Cyprus
- Fine
- 5,000 EUR
- Date
- 2019-03-01
- Articles
- Art. 15 GDPR
Non-compliance with subjects' rights protection safeguards
The data controller could not grant a patient access to his or her own personal information because the file could not be identified. The patient complained to the Commissioner about this and the hospital was fined 5,000 euros. Authority: Office of the Commissioner for Personal Data Protection Cyprus