Leak of medical data from the MyDr system: UODO begins inspections
The Personal Data Protection Office is investigating security measures following a cyberattack on a provider of electronic medical records
Quick Look
- After the data leak of 19 million Poles from the MyDr system, the Office of Personal Data Protection initiated an inspection of the software supplier.
- The office also announced extensive audits in the health care sector to verify the security of medical data processing.
AI-generated summary
Why It Matters
In August, the Ministry of Digitization informed about the data leak of 19 million Poles from the MyDr system. This company provides software for electronic medical records for 12,000 people. branches.
Clinics used a system that failed
The Ministry of Digitization reported the leak in August. At that time, information was provided about 19 million Poles, including: about the drugs and prescriptions that were about to flow out. The company that fell victim to the cyber attack is a supplier of a system for, among others, electronic medical records. The leaked data concerns 12,000. medical entities using the MyDr platform.
Applications are still coming in
After information about the data leak from MyDr, the President of the Personal Data Protection Office, Mirosław Wróblewski, decided to carry out an inspection of this company. Its subject is the technical and organizational measures used and the risk analysis carried out by the company. At the same time, the Personal Data Protection Office continues to accept reports of data protection breaches from administrators.
In a statement published on Wednesday, the Personal Data Protection Office announced that it would conduct a wider inspection "in the processing of health data later this year, as part of monitoring compliance with the application of Regulation 2016/679 in health care sector entities in order to check how they protect the data of people using their services."
"Threats in the area of medical data processing result in the need to carry out additional, intensified inspections at additional entities this year, in particular to verify the security measures they use," the Personal Data Protection Office pointed out.
What to Watch
AI outlook — possibilities, not facts
The Personal Data Protection Office will carry out intensified inspections in the health care sector by the end of the year.
Very likely · Within months
Open Questions
- What specific patient data was compromised?
- Will medical facilities face consequences for insufficient security?
