Polish National Personal Data Protection Office (UODO) · 12 March 2024
Santander Bank Polska S.A.
Insufficient fulfilment of data breach notification obligations
Fine€326,000Fine issued
- Regulator
- Polish National Personal Data Protection Office (UODO)
- Decided
- 12 March 2024
- Country
- Poland
- Sector
- Finance, Insurance and Consulting
- Regulator’s reference
- Not recorded
- Fino case number
- 2024/PL/018
What happened
The DPA imposed a €330,000 (PLN 1,440,549) to a bank for failing to notify the DPA and data subjects of a data breach concerning banking documents which contained numerous personal data, including names and national identification numbers.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 33Notification of a personal data breach to the supervisory authority33(1)Read →
- Art. 34Communication of a personal data breach to the data subject34(1)Read →
- Data breach
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2024/PL/018.