Enforcements in the Medical Sector - Medicals Nordic, Denmark

The Danish data protection authority Datatilsynet recommended a fine of DKK 600,000 (approx. €80,678) for the unlawful processing of citizen's health data. Employees sent information on customers' health and confidential information on WhatsApp. As a result, all employees in the test centre were able to view the health and confidential information of citizens on WhatsApp groups, even those who had no work-related need to have full access to it. In addition, some former employees also had access to the data. Datatilsynet found that Medicals Nordic had failed to implement adequate precautions to safeguard the data and had failed to mitigate risks in connection with the treatment of sensitive data.