Norway's data protection authority, Datatilsynet, announced a fine of NOK 750,000 to Sykehuset Østfold for violations related to alleged mishandling of sensitive patient information. An investigation found certain patient logs were not properly safeguarded or monitored by the hospital, which also stored data well beyond the point it was needed. Datatilsynet concluded the hospital "established a system for access control that is sufficient to prevent similar deviations from occurring in the future."
Full Story