Earlier this week it was revealed that the Data Protection Commission slapped a €650,000 fine on the HSE under data privacy law