HSE fined after records found covered in animal droppings
The Irish Data Protection Commission has fined the Health Service Executive (HSE) €645,000 after discovering medical records stored in derelict buildings and contaminated by animal droppings. The HSE has been ordered to conduct a full audit and safely destroy unnecessary personal data.
Why it matters
This case underscores the critical importance of physical data security and the legal consequences for public bodies failing to protect sensitive patient information.
An investigation by the Data Protection Commission (DPC) into the storage of paper records by the Health Service Executive (HSE) has found incidents of documents contaminated by animal droppings, destroyed by mould, covered in rubble, or rotting due to water damage.
Site inspections by DPC investigators found storage areas in states of "profound disarray and neglect", with records being stored in disused bathrooms, a shipping container in a turf shed, rooms without functioning lighting or heating, as well as derelict buildings.
The DPC has imposed fines of €645,000 on the HSE for the breaches, and has also issued corrective orders.
The investigation was launched in May 2024 after people gained access to two disused psychiatric hospitals and posted videos to social media showing boxes of medical records and patient files that were being stored in the vacant hospitals.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in