Doorstep Dispensaree
€320K($346K USD)final
Date Issued
2019-12-20
Regulation
Authority
Information Commissioner (ICO)
Country
United Kingdom
Violation Type
Failure to implement sufficient measures to ensure information security
Currency
EUR
Violation Summary
The company had stored some 500,000 documents containing names, addresses, dates of birth, NHS numbers and medical information and prescriptions in unsealed containers at the back of the building and failed to protect these documents from the elements, resulting in water damage to the documents.The company stored around 500,000 documents that contained the names, addresses, birth fates, and NHS identification numbers as well as medical information and prescriptions in unsealed containers at the back of a building. As a result of this, the documents were exposed to the elements which resulted in water damage and potentially to the loss of some data.
Articles Violated
Art. 32 GDPR