Addiction Medicine Center
€21K($22K USD)final
Date Issued
2020-03-10
Regulation
Authority
Icelandic Data Protection Authority ('Persónuvernd')
Country
Iceland
Violation Type
Failure to implement sufficient measures to ensure information security
Currency
EUR
Violation Summary
A former employee of National Center of Addiction Medicine (‘SAA’) received boxes that contained personal belongings that he supposedly left there but personal data and health records of 252 former patients and documents with the names of around 3,000 individuals who once participated in an alcohol and drug abuse rehabilitation program.
Articles Violated
Art. 5 (1) f) GDPRArt. 32 GDPR