Back to Cases
technologyhealth · 2021
Yliopiston Apteekki
The Ombudsman fined a pharmacy operator for inadequate access controls and retention practices affecting prescription and customer data under GDPR Articles 5 and 32.
Fine Imposed€180,000.0
Authority
Office of the Data Protection Ombudsman
Stylebalanced
Avg. investigation15 mo
Regulation
Key Takeaways
- Pharmacy systems must tightly control access to sensitive medication records.