GDPR and Identity Management

An MFP in the corridor of a medical practice. In the output tray sit three medical letters with patient data, two referrals and a sick note. The next patient walking past could see them — or take them. What sounds like an everyday scenario is a data protection violation under Article 32 GDPR.

The General Data Protection Regulation requires "appropriate technical and organisational measures" to protect personal data. Authentication at the printer is one such measure — and for organisations processing personal data, it is effectively mandatory. This article explains the legal basis, shows typical risk scenarios and describes the technical solution.

Medical Practice

A medical assistant prints medical letters and reports. Because she is simultaneously attending to patients at reception, she collects the printouts 10 minutes later. In the meantime, patient data — diagnoses, medications, treatment plans — sits openly in the output tray. Anyone walking past the printer can see them.

Law Firm

A lawyer prints a 40-page client file. The first page prints immediately; the last page arrives 2 minutes later. During this time, another lawyer, a client in the waiting area or the cleaner could see the already-printed pages. Client confidentiality is breached.

HR Department

The HR manager prints payslips for 50 employees. Because the printer is in the open-plan office, colleagues walking to the printer can see other employees' salaries. A classic violation of the need-to-know principle and the confidentiality of personal data.

Government Agency with Public Access

In a local authority, an MFP stands in an area accessible to members of the public. Without authentication, a visitor could use the device or view abandoned documents — notices, applications, registration data.

Before: The practice has three MFPs — at reception, in the consulting room and in the laboratory. All devices are accessible without login. Medical letters, reports and prescriptions are printed and sometimes sit in the output tray for minutes.

After: All three MFPs are equipped with card readers. The doctor authenticates via badge before printing patient records. The medical assistant only has access to prescriptions and referrals. Print jobs are only released when the user is present at the device. Uncollected prints are automatically deleted after 4 hours. The audit trail documents every access.

Result: GDPR compliance established, patient data protected, evidence for the supervisory authority available at any time.