Poland

Disciplinary officer

5,400 €

GDPR enforcement action by Polish National Personal Data Protection Office (UODO) on 2023-04-20.

Rank · Sector

#224

of 357 in Public Sector and Education

Rank · Poland

#68

of 111

Rank · All fines

#1,676

of 3,050

Case details

Authority: Polish National Personal Data Protection Office (UODO)
Date: 2023-04-20
Controller / Processor: Disciplinary officer
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) f) GDPR, Art. 5 (2) GDPR, Art. 25 (1) GDPR, Art. 32 (1), (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Polish DPA has imposed a fine of EUR 5,400 on a disciplinary officer of the Polish Bar Association after an unencrypted USB stick containing personal data was lost.

Open original source Links to the regulator's original publication or another source.