UODO reminds controllers to assess breach notification duties after reported MyDr data leak

The Polish data protection authority UODO reminded controllers handling personal data processed by MyDr to conduct risk analyses to determine if the reported breach involving nearly 19 million records triggers GDPR breach notification duties. If a high risk is found, controllers must notify UODO and affected individuals promptly and document their assessments using the prescribed forms.

This Wire brief sits within Fusion42's coverage of Healthtech Infrastructure.