UODO (Poland) · 11 June 2026
Hospital
Name not published.
About: Accountability, DPIA, Data principles, Data security, Processor obligations
FineNo fineViolation found
- Regulator
- UODO (Poland)
- Decided
- 11 June 2026
- Country
- Poland
- Sector
- Not given
- Regulator’s reference
- DKN.5131.12.2022
- Fino case number
- 2026/PL/019
What happened
The DPA reprimanded a hospital and its email service provider for a failure to implement technical and organisational measures following a data breach that involved health data of patients.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(f) · 5(2)Read →
- Art. 24Responsibility of the controller24(1)Read →
- Art. 25Data protection by design and by default25(1)Read →
- Art. 28Processor28(1)Read →
- Art. 32Security of processing32(1)Read →
- Art. 35Data protection impact assessment35(1)Read →
- Accountability
- DPIA
- Data principles
- Data security
- Processor obligations
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2026/PL/019.