Poland

Hospital

6,900 €

GDPR enforcement action by Polish National Personal Data Protection Office (UODO) on 2024-11-26.

Rank · Sector

#164

of 270 in Health Care

Rank · Poland

#60

of 111

Rank · All fines

#1,573

of 3,050

Case details

Authority: Polish National Personal Data Protection Office (UODO)
Date: 2024-11-26
Controller / Processor: Hospital
Sector: Health Care
Quoted Articles: Art. 33 (1) GDPR, Art. 34 (1), (2) GDPR
Type of violation: Insufficient fulfilment of data breach notification obligations

Summary

The Polish DPA has fined a district hospital in Września EUR 6,900 for failing to report a data breach to the DPA and data subjects in a timely manner. A patient had accidentally received another individual's medical records and was able to access their personal data.

Open original source Links to the regulator's original publication or another source.