Yesterday, the District Court of Reykjavík ruled in the case of the Directorate of Health against the Data Protection Authority due to a decision on security weaknesses on the website Heilsuvera. The District Court confirmed the Data Protection Authority’s assessment that there had been a serious weakness and that the lack of security gave rise to a fine. On the other hand, the amount of the fine was reduced from ISK 12,000,000 to ISK 8,000,000.