FineME
Run assessment
Back to Cases
technologyhealth · 2022

Apoteket AB

IMY fined Apoteket for insufficient access controls around prescription and customer data, finding failures to ensure confidentiality and role-based access under GDPR Articles 5 and 32.

Fine Imposed€1.2M
Authority

Integritetsskyddsmyndigheten

Styleaggressive
Avg. investigation15 mo
View authority profile
Regulation

Key Takeaways
  • Pharmacy and prescription systems need strict role-based access and auditability.