Poland

Wyższa Szkoła Logistyki w Poznaniu

15,390 €

GDPR enforcement action by Polish National Personal Data Protection Office (UODO) on 2026-11-02.

Rank · Sector

#149

of 397 in Public Sector and Education

Rank · Poland

#43

of 124

Rank · All fines

#1,250

of 3,280

Case details

Authority: Polish National Personal Data Protection Office (UODO)
Date: 2026-11-02
Controller / Processor: Wyższa Szkoła Logistyki w Poznaniu
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) f) GDPR, Art. 5 (2) GDPR, Art. 25 (1) GDPR, Art. 32 (1), (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Polish DPA has imposed a fine of EUR 15,390 on Wyższa Szkoła Logistyki w Poznaniu. On 23 September 2020, an employee of the controller posted a file containing the personal data of 964 students to the university's online platform. The file contained information on all students who had been admitted the previous year. It contained parents' names, students' names, dates of birth, official ID numbers, addresses, phone numbers, email addresses, bank information and information on student status. It was found that 388 people had access to the file, which was downloaded 361 times. The university's privacy policy was found to be inadequate as it did not cover accidental breaches and had not been updated after the incident.

Open original source Links to the regulator's original publication or another source.