ICO issues first financial penalty under GDPR

The first fine under the General Data Protection Regulation (GDPR) was issued by the Information Commissioner’s Office (ICO) against  ‘Doorstep Dispensaree Ltd’, a London’s pharmacy for several GDPR infringements.

According to the ICO,  approximately 500,000 documents were left in unlocked containers at the back of pharmacy’s premises , which included names, addresses, dates of birth, NHS numbers, medical information and prescriptions belonging to an unknown number of people.

Link: https://ico.org.uk/about-the-ico/news-and-events/news-and-blogs/2019/12/london-pharmacy-fined-after-careless-storage-of-patient-data/