Polish National Personal Data Protection Office (UODO) · 26 November 2024
Hospital
Insufficient fulfilment of data breach notification obligations
Fine€6,900Fine issued
- Regulator
- Polish National Personal Data Protection Office (UODO)
- Decided
- 26 November 2024
- Country
- Poland
- Sector
- Health Care
- Regulator’s reference
- Not recorded
- Fino case number
- 2024/PL/004
What happened
A controller was fined PLN 29,684 (€7,045) after a data breach resulted in the unauthorised disclosure of data concerning health to another person. They were ordered to inform the data subject about the breach after failing to notify both the data subject and the DPA.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Data breach
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2024/PL/004.