Data protection commissioners want to look wider into patient file breach
p
Its understood that the investigation was notified to the HSE on Tuesday Picture Gareth ChaneyCollinspp
The Data Protection Commission has opened an investigation into the HSE after the personal files of patients were compromised
pp
Questions have been raised about unsuitable locations in which that data was stored
pp
A spokesperson for the commission said that the inquiry concerns the storage and retention of personal data contained in paper records held by the HSE via its use of external storage facilities and breaches of security which were notified to the
Data Protection Commission by the HSEpp
The breaches notified to the Data Protection Commission related to two specific locations which were accessed by unauthorised third parties and the circulation of videos taken from these locations showing paper medical records located at these facilities they added
pp
Its understood that the investigation the most significant to be announced since the two new data protection commissioners Dale Sunderland and chair Des Hogan took on their roles in February was notified to the HSE on Tuesday
pp
GDPR breaches by public bodies are potentially punishable by up to 20m in fines though the largest fine handed out to such a State body to date was the 110000 levied on Limerick City and County Council in 2021 over its installation of CCTV cameras around the county without Garda authorisation
pp
The HSE storage facilities in question had allegedly seen individual files suffering water damage while the videos of the files which emerged on social media had broadcast some of the details of the cases concerned
pp
Mr Hogan said that while the investigation resulted from just two breach notifications the commissioners now want to look wider
pp
Ahead of the publication of the Data Protection Commission annual report for 2023 Mr Hogan said This is the thing about taking on public bodies
pp
If we see theres a problem in one area we need to see what the picture is and what the other systemic issues are which need to be tackled
pp
The commissions report which covers the last full year in her role of former commissioner Helen Dixon notes a 20 increase in the number of complaints filed yearonyear for 2023 at 11200 new cases
pp
The commission finalised 19 decisions across 2023 and applied administrative fines of 15bn including the largest GDPR fine to date in the 12bn levied off Facebook owner Meta in May 2023 regarding its transfers of data from the EU into the US
pp
Read MoreGardaí could record dying individuals under new body camera legislation
prefetch
source list
urls newsarid41400577html
ppIrish Examiners WhatsApp channelppFollow and share the latest news and storiesppMore in this sectionppLunchtime NewsppSign up to the best reads of the week from irishexaminercom selected just for youppPlease click here for our privacy statementppppppppppFor a fresh perspective on life todayppMonday June 24 2024 900 PMppMonday June 24 2024 400 PMppMonday June 24 2024 800 PMppAnalysispp Examiner Echo Group Limited Linn Dubh Assumption Road Blackpool Cork Registered in Ireland 523712pp Examiner Echo Group Limitedp
Its understood that the investigation was notified to the HSE on Tuesday Picture Gareth ChaneyCollinspp
The Data Protection Commission has opened an investigation into the HSE after the personal files of patients were compromised
pp
Questions have been raised about unsuitable locations in which that data was stored
pp
A spokesperson for the commission said that the inquiry concerns the storage and retention of personal data contained in paper records held by the HSE via its use of external storage facilities and breaches of security which were notified to the
Data Protection Commission by the HSEpp
The breaches notified to the Data Protection Commission related to two specific locations which were accessed by unauthorised third parties and the circulation of videos taken from these locations showing paper medical records located at these facilities they added
pp
Its understood that the investigation the most significant to be announced since the two new data protection commissioners Dale Sunderland and chair Des Hogan took on their roles in February was notified to the HSE on Tuesday
pp
GDPR breaches by public bodies are potentially punishable by up to 20m in fines though the largest fine handed out to such a State body to date was the 110000 levied on Limerick City and County Council in 2021 over its installation of CCTV cameras around the county without Garda authorisation
pp
The HSE storage facilities in question had allegedly seen individual files suffering water damage while the videos of the files which emerged on social media had broadcast some of the details of the cases concerned
pp
Mr Hogan said that while the investigation resulted from just two breach notifications the commissioners now want to look wider
pp
Ahead of the publication of the Data Protection Commission annual report for 2023 Mr Hogan said This is the thing about taking on public bodies
pp
If we see theres a problem in one area we need to see what the picture is and what the other systemic issues are which need to be tackled
pp
The commissions report which covers the last full year in her role of former commissioner Helen Dixon notes a 20 increase in the number of complaints filed yearonyear for 2023 at 11200 new cases
pp
The commission finalised 19 decisions across 2023 and applied administrative fines of 15bn including the largest GDPR fine to date in the 12bn levied off Facebook owner Meta in May 2023 regarding its transfers of data from the EU into the US
pp
Read MoreGardaí could record dying individuals under new body camera legislation
prefetch
source list
urls newsarid41400577html
ppIrish Examiners WhatsApp channelppFollow and share the latest news and storiesppMore in this sectionppLunchtime NewsppSign up to the best reads of the week from irishexaminercom selected just for youppPlease click here for our privacy statementppppppppppFor a fresh perspective on life todayppMonday June 24 2024 900 PMppMonday June 24 2024 400 PMppMonday June 24 2024 800 PMppAnalysispp Examiner Echo Group Limited Linn Dubh Assumption Road Blackpool Cork Registered in Ireland 523712pp Examiner Echo Group Limitedp
