Privacy

Hospital must pay damages due to GDPR breach

A GDPR breach can cost you more than a fine from the Dutch Data Protection Authority. In addition, data subjects can claim compensation themselves (Article 82 GDPR), including for non-material damage. A hospital that failed to adequately protect privacy was thus ordered to pay compensation...

Published on October 31, 2022 by MKBjuristen.nl
Request a free quote Call 085 25000 44

MKB Juristen drafts custom legal documents

It is best not to cobble together or copy important contracts, terms and conditions, and other legal documents yourself. We help entrepreneurs on a budget with customized legal solutions, clear costs upfront, and practical explanations.

  • Custom contracts, terms and conditions, and legal documents
  • Budget-friendly and clear about the costs upfront
  • Request a free consultation or a no-obligation quote
Free consultation Request a free quote

A GDPR breach can cost you more than a fine from the Dutch Data Protection Authority. In addition, data subjects can claim compensation themselves (Article 82 GDPR), including for non-material damage. A hospital that failed to adequately protect privacy was forced to pay compensation in this way. Good data protection is therefore doubly important.

Fines and damage claims

We often emphasize that a GDPR violation can lead to substantial fines from the Dutch Data Protection Authority — think of the fine a hospital received because employees had too easy access to patient data. But it doesn't stop there: the data subjects themselves can also claim compensation.

Right to compensation (Article 82 GDPR)

If someone suffers damage as a result of a breach of the GDPR, they can recover that damage from the controller (Article 82 GDPR). This can be material damage, but also non-material damage — for example, through loss of control over sensitive data or an infringement of privacy. However, there must be actual damage; a mere violation is not always sufficient.

The lesson: protect data well

Insufficient security or excessive access to personal data can therefore result in both a fine and a claim for damages, in addition to reputational damage. Ensure that only authorized persons have access to (sensitive) data, log access, and secure systems appropriately.

Prevention is cheaper

Map out your processing activities and access rights, restrict access to what is necessary, and document your measures. This reduces the risk of a breach and the resulting costs. Furthermore, demonstrably acting with due care helps should a claim or audit nevertheless occur.

Frequently Asked Questions

Can I receive a claim for damages in addition to a fine?

Yes. Data subjects can claim damages themselves in the event of a GDPR breach (Article 82 GDPR), including for non-material damage.

Does someone always receive compensation for an infringement?

Not automatically. There must be actual damage; a mere violation is not always sufficient.

How do I prevent this?

Restrict access to personal data, secure systems appropriately, and document your measures.

Is your data protection in order?

Our legal experts conduct a privacy scan and draft your data processing agreement . View our privacyteam or schedule a free consultation.

Please note: an article provides general information, but your legal situation may turn out differently.

A contract, conflict, or legal risk must always be assessed based on the facts, documents, evidentiary position, and interests. Are you in doubt? Have your situation assessed before you act.

Legal question regarding this article?

A blog provides explanation, but your situation often requires a concrete legal choice. MKB Juristen helps entrepreneurs with contracts, terms and conditions, GDPR documents, employment documents, disputes, and customized legal solutions.

Drafting, reviewing, and amending contracts
Legal Assistance Help with conflicts and disputes.
Expertise Specialist legal experts and lawyers.
Fixed rates. Clarity on costs in advance.

Latest articles

July 24, 2026

Having a non-compete clause drafted: costs and process

Having a non-compete clause drafted by a lawyer: what does it cost, how does the process work, and when to choose a custom draft over a template.

July 24, 2026

Checking contracts: step-by-step plan for SME entrepreneurs

Checking or reviewing a contract before signing: step-by-step plan, red flags, checklist, and when you need a lawyer.

July 24, 2026

Having general terms and conditions drafted for contractors: costs and process

Having general terms and conditions for contractors drafted by a lawyer: what does it cost, how does the process work, and when do you choose custom work over...

July 23, 2026

Having general terms and conditions drafted: costs and process

Having general terms and conditions drafted by a lawyer: what does it cost, how does the process work, and when to choose a custom-made version over a template.

  • We worked for, among others:
  • MKBjuristen.nl partner
  • MKBjuristen.nl partner
  • MKBjuristen.nl partner
  • MKBjuristen.nl partner
Newsletter for entrepreneurs

Receive practical legal tips in your mailbox

Register now

Enter your email address and receive our newsletter.

No spam. Only legal tips.
By registering, you agree to our privacy statement.
SME Lawyers at the Chamber of Commerce Source: Chamber of Commerce 2019
Free consultation