The Irish Data Protection Commission (DPC) has issued a fine to the Health Service Executive (HSE) after an investigation revealed that sensitive patient medical records were improperly stored. The documents were discovered in a turf shed, where they were left vulnerable to environmental damage and potential unauthorized access, as evidenced by the presence of animal droppings on the files.

The DPC investigation concluded that the storage conditions failed to meet the required standards for protecting personal health data. According to the commission, the HSE’s handling of these records created a significant risk of unauthorized access to private medical information. The incident highlights ongoing concerns regarding the administrative management of physical records within the Irish public health system. While the HSE has acknowledged the breach, the incident has drawn criticism from data privacy advocates who argue that the organization must implement stricter oversight to ensure that patient confidentiality is maintained, even when dealing with legacy paper files. The fine serves as a formal regulatory response to what the DPC characterized as a failure to adequately safeguard sensitive information.