UODO (Poland) · 12 July 2023
Not named in the source
About: Data breach, Data principles
FinePLN11,790≈ €2,650Violation found
- Regulator
- UODO (Poland)
- Decided
- 12 July 2023
- Country
- Poland
- Sector
- Not given
- Regulator’s reference
- DKN.5131.43.2022
- Fino case number
- 2023/PL/026
What happened
The Polish DPA imposed a fine of €2,640 against a controller for not notifying data subjects of a breach and for not informing the DPA within the 72 hour time-limit, in violation of Articles 33 and 34 GDPR. Furthermore, the controller breached the principle of accountability, as they were unable to demonstrate compliance.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(2)Read →
- Art. 33Notification of a personal data breach to the supervisory authorityRead →
- Art. 34Communication of a personal data breach to the data subjectRead →
- Data breach
- Data principles
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2023/PL/026.