5. In accordance with paragraph 2, the following infringements shall be subject to administrative fines of a maximum of EUR 20 000 000 or, in the case of an undertaking, of a maximum of 4 % of its total worldwide annual turnover in the preceding financial year, whichever is higher:
|
(a)
|
health data users processing electronic health data obtained via a data permit issued pursuant to Article 68 for the uses referred to in Article 54;
|
|
(b)
|
health data users extracting personal electronic health data from secure processing environments;
|
|
(c)
|
re-identifying or attempting to re-identify the natural persons to whom the electronic health data obtained by the health data users on the basis of a data permit or a health data request pursuant to Article 61(3) relate;
|
|
(d)
|
non-compliance with enforcement measures taken by the health data access body pursuant to Article 63(3) and (4).
|