Case Study: Herning Kommune secures patient data and meets eIDAS/NSIS with Yubico's YubiKey

Herning Kommune secures patient data with the YubiKey

Herning Kommune, a Danish municipality providing extensive health and eldercare services, needed to meet EU eIDAS and Denmark’s NSIS requirements while protecting sensitive patient records. The IT team faced challenges from shared devices, staff who don’t use personal phones, and the need for stronger, least-privilege authentication for employees handling medical information.

They deployed the Yubico Security Key C NFC (FIDO2/WebAuthn) to more than 1,500 health staff—primarily nurses and nurse assistants—with a 90% adoption rate. The hardware keys deliver phishing-resistant MFA that works on shared and mobile devices without software or batteries, secure access to protected health information, user-based logging for medication audits, compliance with eIDAS/NSIS, and plans to expand coverage across all health employees.

Herning Kommune

Jonas Philipsen

IT Consultant