Skip to Primary Navigation

Icelandic DPA fines health care system IKr 5m for unlawful data processing

Lots of patient's files spread out on a table.
Photo: Alexandre Schneider/Getty Images

Institution failed to ensure that the mergers of healthcare records were authorized.

Heilsugæsla höfuðborgarsvæðisins (HH), an institution which operates 15 health care centres in the Reykjavik area in Iceland, has been fined IKr 5m ($35,844) by Personuvernd, the Icelandic Data Protection Authority, after processing personal data unlawfully. The institution manages a joint medical record system containing thousands of

The institution,

Get full access, free for a month

Start your 28-day free trial to continue reading and access
all content on GRIP – no payment details required.

What’s included:

  • Every new article, plus our 5,000+ archive
  • Daily regulatory insight and guidance
  • Exclusive interviews and in-depth analysis
  • Coverage of industry-leading events and conferences
  • All podcasts and videos, featuring industry experts
  • The full set of Rules Navigator tools
  • An ad-free experience