European Data Protection Digest

Germany Fines Drug Chain for Data Retention

DATA RETENTION—GERMANY

January 22, 2010

Germany's Data Protection Authority (DPA) has fined pharmaceutical chain Müller Group €137,500 for retaining illegally collected healthcare data, and for failing to hire a data protection officer, according to the Hunton & Williams Privacy and Information Security Law blog. The chain, which employs 20,000, had required employees returning from sick leave to inform the company of the reason for their absence by filling out a form that was collected and stored in a central HR database. In all, Müller had collected more than 24,000 such forms in a practice that the DPA said was not justified in the vast majority of cases.
Full Story