The Commissioner for Information of Public Importance and Personal Data Protection has completed an inspection of compliance with the Law on Personal Data Protection (LPDP) at the National Health Insurance Fund (NHIF) in connection with the online posting of data of an underage health insurance beneficiary from the Fund’s records by member of NHIF’s Management Board Marjan Rističević. In connection with this, the Commissioner has issued a relevant Letter of Warning.
The inspection found irregularities in the actions undertaken by the NHIF when processing the insurance beneficiary’s personal data, both in terms of making personal data from the central records available to a member of the Management Board without proper legal grounds and in terms of failure to put in place the required technical, human resources and organizational measures to protect personal data, in compliance with the duty provided for in Article 47 of the LPDP.