Manx Care has received an Enforcement Notice from the Information Commissioner after a number of data breaches.
According to the document, there have been several breaches, including one where the unencrypted medical record of a patient was emailed to around 2,200 people.
The notice says that damage or distress to individuals is likely due to the lack of appropriate technical and organisational measures.
Manx Care now have four months to comply with GDPR regulations and provide the Commissioner with updates, or face a fine of up to £1m.
You can read the full document here.
Charity frees trapped sparrowhawk
Pet food bank needs your help!
FOI reveals Freemasons in senior parliament positions
Manx Telecom applies for fibre telegraph poles in Tromode
Wellwishers raise thousands to give Sandy hope!
Deepfake scammers cost Island residents £1.2 million last year
Bereavement payment cuts 'followed UK' says Treasury Minister
Broken glass on beach sparks plea from local authority
