Poland

Housing cooperative

11,100 €

GDPR enforcement action by Polish National Personal Data Protection Office (UODO) on 2023-03-01.

Rank · Sector

#31

of 356 in Individuals and Private Associations

Rank · Poland

#48

of 122

Rank · All fines

#1,361

of 3,170

Case details

Authority: Polish National Personal Data Protection Office (UODO)
Date: 2023-03-01
Controller / Processor: Housing cooperative
Sector: Individuals and Private Associations
Quoted Articles: Art. 33 (1) GDPR, Art. 34 (1) GDPR
Type of violation: Insufficient fulfilment of data breach notification obligations

Summary

The Polish DPA has imposed a fine of EUR 11,100 on a housing cooperative. The controller had disclosed personal data of a member of the cooperative to an unauthorized person. The incident was recorded in an internal register of violations, however the controller failed to inform the DPA and the data subject of the incident in a timely manner.
Update: The fine had been annuled by the regional administrative court, the courts ruling was set aside by the Supreme Administrative Court, which upheld the UODO's decision on 2026-08-26.

Open original source Links to the regulator's original publication or another source.