From 2013 to 2019, the Østfold HF Hospital did not properly control or manage access to patient folders in which it stored sensitive data (e.g. reason for hospitalization). The Datatilsynet concluded that the hospital had not ensured the proper organizational or technical measures required to protect the personal data. Therefore, the hospital had breached both the GDPR and the Patient Records Act.
from to the østfold hf hospital did not properly control or manage access to patient folders in which it stored sensitive data eg reason for hospitalization the datatilsynet concluded that the hospital had not ensured the proper organizational or technical measures required to protect the personal data therefore the hospital had breached both the  and the patient records act
   østfold hf hospital   properly control  manage access  patient folders    store sensitive data eg reason  hospitalization  datatilsynet conclude   hospital   ensure  proper organizational  technical measure require  protect  personal data therefore  hospital  breach      patient record act