Authority
ICO
Country
United Kingdom
Date Issued
March 2, 2023
Industry
Healthcare
Summary
NHS Blood and Transplant received a reprimand from the ICO for inadvertently deploying untested development code into a live transplant matching system in August 2019, which could have compromised patient data integrity and organ allocation processes. The organization failed to implement adequate security controls and testing procedures before code deployment.
Violation Types
SecurityData ProcessingRisk Assessment
Articles Violated
Related Enforcement Actions
Avoid enforcement risk with automated compliance
IQWorks helps organizations automate UK GDPR compliance before regulators come knocking.
Talk to an Expert