Heilsugæsla höfuðborgarsvæðisins (HH), an institution which operates 15 health care centres in the Reykjavik area in Iceland, has been fined IKr 5m ($35,844) by Personuvernd, the Icelandic Data Protection Authority, after processing personal data unlawfully. The institution manages a joint medical record system containing thousands of
The institution,