Back to Cases
technologyhealth · 2023
CUF Saúde
CNPD sanctioned CUF Saúde for insufficient controls over employee access to patient information and inadequate audit logging under GDPR Articles 5 and 32.
Fine Imposed€275,000.0
Authority
Comissão Nacional de Proteção de Dados
Stylebalanced
Avg. investigation15 mo
Regulation
Key Takeaways
- Private hospital groups need continuous access recertification for clinical systems.