Data Commissioner Orders Hospital to Pay Sh525,000 for Mishandling Patient’s Medical Data

The case was filed by Merceline Odeyo, who alleged that the hospital repeatedly issued her with medical results belonging to another patient with a similar first name but a different surname. - Kenya breaking news | Kenya news today | Capitalfm.co.ke..

✨ Key Highlights

The Office of the Data Protection Commissioner (ODPC) has ordered St Luke’s Orthopaedic and Trauma Hospital to pay Sh525,000 for unlawfully disclosing a patient’s sensitive medical information.

Sh525,000 ordered as compensation to the complainant.
St Luke’s Orthopaedic and Trauma Hospital found liable by Data Commissioner Immaculate Kassait.
The hospital mishandled and incorrectly shared a patient's medical results and shared sensitive health information with a third-party laboratory without informed consent.