Poland

L. Zamenhof University Children's Clinical Hospital in Białystok

15,600 €

GDPR enforcement action by Polish National Personal Data Protection Office (UODO) on 2025-06-30.

Rank · Sector

#115

of 270 in Health Care

Rank · Poland

#42

of 111

Rank · All fines

#1,166

of 3,050

Case details

Authority: Polish National Personal Data Protection Office (UODO)
Date: 2025-06-30
Controller / Processor: L. Zamenhof University Children's Clinical Hospital in Białystok
Sector: Health Care
Quoted Articles: Art. 5 (2) GDPR, Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Polish DPA has imposed a fine of EUR 15,600 on the L. Zamenhof University Children's Clinical Hospital in Białystok. The controller did not implement sufficient technical and organisational measures to ensure information security, resulting in a ramsomeware attack on its IT systems.

Open original source Links to the regulator's original publication or another source.