Back to Cases
technologyhealth · 2019
Hospital Garcia de Orta
CNPD sanctioned the hospital for inadequate access governance and insufficient segregation of user profiles in clinical systems under GDPR Articles 5 and 32.
Fine Imposed€150,000.0
Authority
Comissão Nacional de Proteção de Dados
Stylebalanced
Avg. investigation15 mo
Regulation
Key Takeaways
- Clinical systems need granular profiles aligned to actual treatment roles.