Poland

Mayor

1,700 €

GDPR enforcement action by Polish National Personal Data Protection Office (UODO) on 2022-11-02.

Rank · Sector

#337

of 357 in Public Sector and Education

Rank · Poland

#104

of 111

Rank · All fines

#2,459

of 3,050

Case details

Authority: Polish National Personal Data Protection Office (UODO)
Date: 2022-11-02
Controller / Processor: Mayor
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) f) GDPR, Art. 5 (2) GDPR, Art. 25 (1) GDPR, Art. 32 (1), (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Polish DPA has imposed a fine of EUR 1,700 on the mayor of Dobrzyniewo Duże municipality. The mayor had reported a data breach to the DPA pursuant to Art. 33 GDPR. An employee's work computer, which contained personal data, had been stolen. During its investigation, the DPA determined that the data on the computer was not adequately secured and that the municipality had failed to take appropriate technical measures to protect personal data.

Open original source Links to the regulator's original publication or another source.