Poland

Minister of Justice

23,540 €

GDPR enforcement action by Polish National Personal Data Protection Office (UODO) on 2026-06-02.

Rank · Sector

#112

of 358 in Public Sector and Education

Rank · Poland

#29

of 112

Rank · All fines

#1,005

of 3,059

Case details

Authority: Polish National Personal Data Protection Office (UODO)
Date: 2026-06-02
Controller / Processor: Minister of Justice
Sector: Public Sector and Education
Quoted Articles: Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Polish DPA has imposed a fine of EUR 23,500 on the Minister of Justice. The controller failed to implement adequate technical and organisational measures to ensure data security, resulting in persons to obtain personal data of judges which then got published in the so called "hate scandal" in which data of judges who expressed unwanted opinions had been published, resulting in those judges becoming targets of defamatory attacks.

Open original source Links to the regulator's original publication or another source.