Poland

Chief Commander of the Police

17,600 €

GDPR enforcement action by Polish National Personal Data Protection Office (UODO) on 2025-03-24.

Rank · Sector

#139

of 357 in Public Sector and Education

Rank · Poland

#41

of 111

Rank · All fines

#1,144

of 3,050

Case details

Authority: Polish National Personal Data Protection Office (UODO)
Date: 2025-03-24
Controller / Processor: Chief Commander of the Police
Sector: Public Sector and Education
Quoted Articles: Art. 6 (1) GDPR, Art. 9 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Polish DPA has fined the Chief Commander of the Polish Police EUR 17,600. During a press conference, the Chief Commander of the Police disclosed the personal and medical data of an individual who had had an abortion which had been the subject of an investigation by the Polish police. The disclosure was specific enough to allow a third party to identify the person. This resulted in the specific danger of discrimination, loss of reputation and loss of control over their own data. Therefore, the Polish DPA decided to classify the violation as one of significant importance and serious nature.

Open original source Links to the regulator's original publication or another source.