Irish health service operator fined for storing data in disused bathroom, turf shed
The watchdog said the HSE’s failures created ongoing risks to sensitive medical information and led to corrective orders on storage and retention.
- On Wednesday, the Data Protection Commission fined Ireland's Health Service Executive €645,000 for storing medical records in "profound disarray" across 12 facilities. The record penalty followed an investigation into inadequate storage conditions at former psychiatric hospitals.
- Intruders accessed paper records at St Loman's Hospital and St Conal's Hospital in 2023, posting videos on social media. The DPC launched its investigation after discovering whether these breaches were systemic across HSE storage properties.
- DPC Deputy Commissioner Graham Doyle reported inspections revealed "significant issues with documents damaged or effectively destroyed by mould." Records were found in disused bathrooms, a shipping container in a turf shed, and rooms without functioning lighting or heating.
- The HSE apologized for data breaches at St Loman's and St Conal's sites, stating "we apologise to patients and the people who use our services." The agency is rolling out a national records management program and auditing all storage facilities.
- This fine marks the largest ever imposed on an Irish public body by the DPC watchdog. The HSE was previously fined €65,000 in 2020 for similar failures, underscoring persistent challenges with paper healthcare record security.
15 Articles
15 Articles
HSE hit with €645,000 fine over series of personal data breaches
The HSE has been fined €645,000 over serious data protection failures involving the storage of sensitive medical records. An investigation by the Data Protection Commission (DPC) uncovered documents damaged by mould and water, contaminated by animal droppings and left among rubble and other debris. Inspectors also found records being kept in disused bathrooms and cubicles, a shipping container in a turf shed and derelict buildings. Pic: Sam Boa…
Irish health service fined after rotting medical records found in turf shed
The Data Protection Commission found the system ‘risked unauthorised access to sensitive medical information’
Irish health service operator fined for storing data in disused bathroom, turf shed
Ireland's health service operator was fined a record amount for an Irish public body by the country's data regulator for storing medical records in "profound disarray" in areas including a turf shed and a disused bathroom that in some cases were contaminated by animal droppings.
Coverage Details
Bias Distribution
- 50% of the sources lean Left, 50% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium


















