Loading Curie Briefs...
Getting the latest healthcare news for you
Getting the latest healthcare news for you
Ireland's Health Service Executive (HSE) has been fined a record €645,000 by the Data Protection Commission for storing patient medical records in deeply inadequate conditions — including disused bathrooms, turf sheds, and mould-contaminated derelict buildings. Inspectors found records in "profound disarray," with some effectively destroyed by mould or covered in rubble. The HSE has accepted the findings and pledged to comply with all remediation orders.
Ireland's Health Service Executive (HSE) has been issued a record €645,000 fine — the largest ever imposed on an Irish public body — by the Data Protection Commission (DPC) after inspectors uncovered deeply concerning conditions at 12 medical records storage sites. The violations came to light during an investigation into two former psychiatric hospitals where records were being kept in mould-contaminated buildings.
Inspectors found patient records stored in disused bathrooms, a shipping container in a turf shed, rooms without lighting or heating, and derelict buildings — some contaminated by animal droppings. Records were described as being in "profound disarray," with some effectively destroyed by mould or buried under rubble, raising serious concerns about unauthorized access to sensitive medical information.
By the Numbers:
Why it matters: This case is a stark reminder that data protection isn't just a digital issue — physical safeguarding of patient records is equally critical. The HSE has been ordered to audit all storage facilities, remove records from unfit locations, and implement a proper records management system. With a prior fine in 2020 for the same issues, the repeat offense raises serious questions about accountability in public health data governance.
