Back to Explorer
GDPRInsuranceHigh Severity

German Health Insurance Company

€3,600,000

Authority

Landesbeauftragte für Datenschutz und Informationsfreiheit Baden-Württemberg

Country

Germany

Date Issued

July 15, 2022

Industry

Insurance

Summary

Health insurance company suffered data breach exposing sensitive medical information due to inadequate security infrastructure and failed to notify authorities promptly.

Violation Types

Data BreachSecurityNotification

Articles Violated

Art. 32 GDPRArt. 33 GDPR

Avoid enforcement risk with automated compliance

IQWorks helps organizations automate GDPR compliance before regulators come knocking.

Talk to an Expert