Poland

Panek SA

357,000 €

GDPR enforcement action by Polish National Personal Data Protection Office (UODO) on 2024-12-23.

Rank · Sector

#55

of 597 in Industry and Commerce

Rank · Poland

#10

of 111

Rank · All fines

#283

of 3,050

Case details

Authority: Polish National Personal Data Protection Office (UODO)
Date: 2024-12-23
Controller / Processor: Panek SA
Sector: Industry and Commerce
Quoted Articles: Art. 32 (1), (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Polish DPA has imposed a fine of EUR 357,000 on Panek SA. During the reconstruction of its website, the controller failed to implement adequate technical and organisational measures to ensure data security, resulting in leak of customer data. The controller appealed against the decision, but the provincial administrative court in Warsaw dismissed the appeal.

Open original source Links to the regulator's original publication or another source.