Search
Contact
19.07.2019 | KPMG Law Insights

Hague hospital fined up to 760,000 euros

Hague hospital fined up to 760,000 euros

The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) has imposed a fine of 460,000 euros on a hospital for failing to protect patient records from unnecessary access in the hospital information system. According to the report, at least 85 hospital employees unnecessarily and unauthorizedly accessed the medical records of a known patient without being involved in the patient’s care.

The regulator made it clear in its press release that the relationship between a healthcare provider and a patient is completely confidential. This also applies within the walls of a hospital. A hospital must therefore take all technical and organizational measures to ensure the security of patient data. Each hospital would need to regularly review who consults which record. This is the only way to take timely action if an unauthorized employee accesses a file.

Patient files should also be technically secured with at least two-factor authentication. Each time a patient record is accessed, a user’s identity would have to be logged by a code or password in combination with a personnel card. Uniform passwords for entire departments or the use of a common user name to avoid having to log in again each time are not permissible.

In order to implement these requirements effectively and as quickly as possible, the supervisory authority is putting the hospital under further pressure: as long as the safety precautions have not been improved, the hospital must pay an additional fine of another 100,000 euros every two weeks, up to a maximum of 300,000 euros. As a result, the hospital faces a maximum fine of 760,000 euros.

Already in October last year, a fine of 400,000 euros was imposed on a hospital in Portugal for a similar violation. The reason for this was also the lack of security of the patient file against access by non-treating medical staff. Even if the national supervisory authorities are in principle free to determine the level of fines, a comparable level of fines must also be expected in Germany for the inadequate security of patient records due to inadequate authorization concepts in hospital information systems.

Explore #more

04.02.2025 | Deal Notifications

KPMG Law advises ROTOP shareholders in connection with an investment by GENUI and SHS Capital

KPMG Law Rechtsanwaltsgesellschaft mbH (KPMG Law) provided legal advice to the shareholders of ROTOP Pharmaka GmbH (ROTOP), a provider of development and manufacturing capacities for…

31.01.2025 | Deal Notifications

KPMG Law supports HWP with majority stake in instakorr GmbH

KPMG Law Rechtsanwaltsgesellschaft mbH (KPMG Law) advised HWP Handwerkspartner Group (HWP) on the acquisition of a majority stake in instakorr GmbH (instakorr). KPMG Law carried…

29.01.2025 | KPMG Law Insights

Green hydrogen from wastewater – legal hurdles in production

Hydrogen provides significantly more energy than gasoline or diesel. If it is produced using renewable energies, hydrogen can make a significant contribution to climate protection.…

29.01.2025 | Deal Notifications

KPMG Law advises HWP on the acquisition of Hydro-Tech GmbH

KPMG Law Rechtsanwaltsgesellschaft mbH (KPMG Law) advised HWP Handwerkspartner Group (HWP) on the acquisition of Hydro-Tech GmbH Hochdruck- und Reinigungstechniken Maler und Betoninstandsetzungsarbeiten (Hydro-Tech). KPMG…

29.01.2025 | KPMG Law Insights

What the Green Claims Directive means for companies – an overview

With the Green Claims Directive, the EU will introduce extensive regulations on the requirements for permissible environmental claims. The aim is to prevent greenwashing so…

27.01.2025 | In the media

Merger control and national security: key considerations for corporate transactions

Financier Worldwide discusses key merger control and national security considerations for corporate transactions with Lisa Navarro, Stuart Bedford, Gerrit Rixen (KPMG Law Germany), Helen Roxburgh…

24.01.2025 | In the media

Guest article in the ESGZ: Opportunities with discrimination risks: AI in the field of human resources

Artificial intelligence (AI) is no longer a dream of the future, but is already changing the world of work at a rapid pace. Companies are…

24.01.2025 | Deal Notifications

KPMG Law advises DKB on joint ventures with Sparkassen-Finanzgruppe in credit processing

KPMG Law advises Deutsche Kreditbank AG (DKB) on the establishment of a joint venture in the field of credit card processing with companies of the…

24.01.2025 | KPMG Law Insights

Tübingen packaging tax statute is constitutional

Tübingen’s packaging tax is constitutional. The Federal Constitutional Court has rejected a constitutional complaint against the packaging tax statutes of the University City of Tübingen.…

22.01.2025 | KPMG Law Insights

The EU packaging regulation sets strict requirements for packaging

The EU has adopted the Packaging Regulation. After the European Parliament adopted the Commission’s draft on April 24, 2024, the EU member states also approved…

Contact

Sebastian Hoegl, LL.M. (Wellington)

Senior Manager
Lawyer
Specialist lawyer for IT law
LL.M. (Wellington)

Heinrich-von-Stephan-Straße 23
79100 Freiburg im Breisgau

Tel.: +49 761 769999-20
shoegl@kpmg-law.com

Maik Ringel

Senior Manager

Münzgasse 2
04107 Leipzig

Tel.: +49 341 22572563
mringel@kpmg-law.com

© 2024 KPMG Law Rechtsanwaltsgesellschaft mbH, associated with KPMG AG Wirtschaftsprüfungsgesellschaft, a public limited company under German law and a member of the global KPMG organisation of independent member firms affiliated with KPMG International Limited, a Private English Company Limited by Guarantee. All rights reserved. For more details on the structure of KPMG’s global organisation, please visit https://home.kpmg/governance.

 KPMG International does not provide services to clients. No member firm is authorised to bind or contract KPMG International or any other member firm to any third party, just as KPMG International is not authorised to bind or contract any other member firm.

Scroll