Poland

National Prosecutor's Office

19,800 €

GDPR enforcement action by Polish National Personal Data Protection Office (UODO) on 2024-09-02.

Rank · Sector

#131

of 357 in Public Sector and Education

Rank · Poland

#35

of 111

Rank · All fines

#1,112

of 3,050

Case details

Authority: Polish National Personal Data Protection Office (UODO)
Date: 2024-09-02
Controller / Processor: National Prosecutor's Office
Sector: Public Sector and Education
Quoted Articles: Art. 6 (1) GDPR, Art. 9 (1) GDPR, Art. 33 (1) GDPR, Art. 34 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Polish DPA has imposed a fine of EUR 19,800 on the National Prosecutor's Office. During a press conference, the public prosecutor's office disclosed an individual's personal data, such as their first and last name and special categories of data, without a valid legal basis. The DPA also found that the controller failed to report the data breach to the DPA and the data subject.

Open original source Links to the regulator's original publication or another source.