Poland

Polish Minister of Health

23,000 €

GDPR enforcement action by Polish National Personal Data Protection Office (UODO) on 2023-12-20.

Rank · Sector

#92

of 270 in Health Care

Rank · Poland

#31

of 111

Rank · All fines

#1,004

of 3,050

Case details

Authority: Polish National Personal Data Protection Office (UODO)
Date: 2023-12-20
Controller / Processor: Polish Minister of Health
Sector: Health Care
Quoted Articles: Art. 25 (1) GDPR, Art. 32 (1), (2) GDPR, Art. 34 (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Polish DPA has imposed a fine of EUR 23,000 on the Polish Minister of Health. The controller had accessed information via a database relating to a physician who had prescribed themselves psychotropic drugs and then later published this information on a social network.

Open original source Links to the regulator's original publication or another source.