Suzanne Smalley reports: France’s data privacy regulator (CNIL) has fined the country’s biggest internet provider €50 million ($53 million) for sending customers ads they didn’t ask for and for continuing to use tracking code to monitor users’ activities even after they withdrew consent for the practice. The telecom giant Orange S.A. offers an electronic messaging…
Category: Breaches
VA Nurse Charged With Unlawfully Accessing Patient Health Information
GRAND RAPIDS – U.S. Attorney for the Western District of Michigan Mark Totten today announced that Jessica Nicole Pitcher, 41, of Shelbyville, Michigan, was charged by misdemeanor information with unlawfully accessing health information pertaining to a patient of the U.S. Department of Veterans Affairs without authorization, in violation of Title 42, United States Code, Section 1320d-6(a)(2)….
Finnish SA: Administrative fine imposed on Posti for unlawful processing of personal data
Posti is the Finnish mail and package delivery service. The Finnish State exercises the shareholder’s decision-making power over it. On December 6, the European Data Protection Board announced a decision by the Finnish Supervisory Authority that imposed a monetary penalty of 2.4 million euros and a reprimand. As EDPB summarizes the case: The Finnish Supervisory…
HHS Office for Civil Rights Imposes a $548,265 Penalty Against Children’s Hospital Colorado
Not all monetary penalties are for breaches affecting large numbers of patients. In this case, HHS imposed a penalty on an entity that had breaches in both 2017 and 2020. PogoWasRight notes that the 2017 incident affected 3,370 patients, and the 2020 incident affected 2,553 patients — as reported to HHS at the time. Today,…