The Dutch Data Protection Authority (AP) has blamed the Alliance for Quality in Mental Healthcare (Akwa GGZ) for the illegal processing of health data. This is an "insufficiently anonymous" data set that was later destroyed by Akwa GGZ, AP writes Monday.
It is about a data set from Stichting Benchmark GGZ (SBG), which did research into the quality of mental health care, in which patients had to fill in questionnaires. The data that resulted from this were provided with a pseudonym.
However, the process by which that pseudonym was created was not randomized. As a result, the identity of the patient was possibly traceable.
SBG transferred the dataset to Akwa, which is conducting similar research shortly before the foundation was dissolved. Because neither Akwa nor SBG is a healthcare institution, they are not allowed to process medical personal data. According to AP, that happened here.
Akwa has quarantined the data and subsequently destroyed it, AP reports. That is why the authority sees no reason to take stronger measures.