HSE could face €1m fine for GDPR failings over cyber attack 

'Given how outdated the HSE’s systems are, this whole situation is an opportunity for them to get their house properly in order,' a senior privacy source said.

The cyber attack suffered by the Irish health service could see the HSE fined €1m for GDPR failings – the maximum amount allowable under Irish law.

The Data Protection Commission has confirmed it received notice of the massive breach from the HSE within 72 hours of it occurring, as required by law.