Privacy

Hospital must pay damages due to GDPR breach

A GDPR breach can cost you more than a fine from the Dutch Data Protection Authority. In addition, data subjects can claim compensation themselves (Article 82 GDPR), including for non-material damage. A hospital that failed to adequately protect privacy was thus ordered to pay compensation...

Published on October 31, 2022 by MKBjuristen.nl
Request a free quote Call 085 25000 44

MKB Juristen drafts custom legal documents

It is best not to cobble together or copy important contracts, terms and conditions, and other legal documents yourself. We help entrepreneurs on a budget with customized legal solutions, clear costs upfront, and practical explanations.

  • Custom contracts, terms and conditions, and legal documents
  • Budget-friendly and clear about the costs upfront
  • Request a free consultation or a no-obligation quote
Free consultation Request a free quote

A GDPR breach can cost you more than a fine from the Dutch Data Protection Authority. In addition, data subjects can claim compensation themselves (Article 82 GDPR), including for non-material damage. A hospital that failed to adequately protect privacy was forced to pay compensation in this way. Good data protection is therefore doubly important.

Fines and damage claims

We often emphasize that a GDPR violation can lead to substantial fines from the Dutch Data Protection Authority — think of the fine a hospital received because employees had too easy access to patient data. But it doesn't stop there: the data subjects themselves can also claim compensation.

Right to compensation (Article 82 GDPR)

If someone suffers damage as a result of a breach of the GDPR, they can recover that damage from the controller (Article 82 GDPR). This can be material damage, but also non-material damage — for example, through loss of control over sensitive data or an infringement of privacy. However, there must be actual damage; a mere violation is not always sufficient.

The lesson: protect data well

Insufficient security or excessive access to personal data can therefore result in both a fine and a claim for damages, in addition to reputational damage. Ensure that only authorized persons have access to (sensitive) data, log access, and secure systems appropriately.

Prevention is cheaper

Map out your processing activities and access rights, restrict access to what is necessary, and document your measures. This reduces the risk of a breach and the resulting costs. Furthermore, demonstrably acting with due care helps should a claim or audit nevertheless occur.

Frequently Asked Questions

Can I receive a claim for damages in addition to a fine?

Yes. Data subjects can claim damages themselves in the event of a GDPR breach (Article 82 GDPR), including for non-material damage.

Does someone always receive compensation for an infringement?

Not automatically. There must be actual damage; a mere violation is not always sufficient.

How do I prevent this?

Restrict access to personal data, secure systems appropriately, and document your measures.

Is your data protection in order?

Our legal experts conduct a privacy scan and draft your data processing agreement . View our privacyteam or schedule a free consultation.

Please note: an article provides general information, but your legal situation may turn out differently.

A contract, conflict, or legal risk must always be assessed based on the facts, documents, evidentiary position, and interests. Are you in doubt? Have your situation assessed before you act.

Legal question regarding this article?

A blog provides explanation, but your situation often requires a concrete legal choice. MKB Juristen helps entrepreneurs with contracts, terms and conditions, GDPR documents, employment documents, disputes, and customized legal solutions.

Drafting, reviewing, and amending contracts
Legal Assistance Help with conflicts and disputes.
Expertise Specialist legal experts and lawyers.
Fixed rates. Clarity on costs in advance.

Latest articles

September 9, 2026

What is a freelancer hiring check for the client? Explanation and use

What is a freelancer hiring check for the client? Explanation of the role, when you need it, and what to look out for...

September 9, 2026

Having a statute of limitations interruption drafted: costs and process

Having a legal expert draft the interruption of the statute of limitations: what does it cost, how does the process work, and when should you choose custom work over a...

September 9, 2026

Drafting an agreement for hiring and leasing self-employed professionals: this is what should be included

Drafting an agreement for hiring and leasing freelancers? Read about the components that should be included, common mistakes, and when to consult a lawyer.

September 8, 2026

What are the general terms and conditions for companies that sell training and courses? Function and legal status

What are general terms and conditions for companies that sell education and courses? Explanation of the function, when you need it and where...

  • We worked for, among others:
  • MKBjuristen.nl partner
  • MKBjuristen.nl partner
  • MKBjuristen.nl partner
  • MKBjuristen.nl partner
Newsletter for entrepreneurs

Receive practical legal tips in your mailbox

Register now

Enter your email address and receive our newsletter.

No spam. Only legal tips.
By registering, you agree to our privacy statement.
SME Lawyers at the Chamber of Commerce Source: Chamber of Commerce 2019
Free consultation