🇪🇺 Polish National Personal Data Protection Office (UODO)
126 decisions · €33.7M total fines · POLAND →
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2023-04-20 | Disciplinary officer Insufficient technical and organisational measures to ensure information security | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 5Art. 25Art. 32 | €5,400 |
| 2023-03-01 | Housing cooperative Insufficient fulfilment of data breach notification obligations | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 33Art. 34 | €11,100 |
| 2023-02-08 | Company Insufficient technical and organisational measures to ensure information security | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 5Art. 24Art. 25Art. 32 | €7,200 |
| 2023-02-07 | Housing association Insufficient fulfilment of data breach notification obligations | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 5Art. 28Art. 33Art. 34 | €321 |
| 2023-01-25 | Company Insufficient cooperation with supervisory authority | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 31Art. 58 | €4,100 |
| 2023-01-19 | Szczecin-Centrum District Court Insufficient technical and organisational measures to ensure information security | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 5Art. 24Art. 25Art. 32 | €6,400 |
| 2022-12-30 | Company Insufficient cooperation with supervisory authority | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 58 | €6,300 |
| 2022-11-30 | PIONIER (law firm) Insufficient legal basis for data processing | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 5Art. 6Art. 9 | €9,600 |
| 2022-11-02 | Mayor Insufficient technical and organisational measures to ensure information security | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 5Art. 25Art. 32 | €1,700 |
| 2022-09-07 | Sułkowice Cultural Center Insufficient data processing agreement | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 28 | €530 |
| 2022-08-31 | POLAND DPA: Insufficient cooperation with supervisory authority Insufficient cooperation with supervisory authority | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 31Art. 58 | €1,450 |
| 2022-08-30 | TIMSHEL Sp. z o.o. Insufficient cooperation with supervisory authority | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 58 | €6,800 |
| 2022-07-06 | Głównego Geodetę Kraju Insufficient fulfilment of data breach notification obligations | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 33Art. 34 | €12,450 |
| 2022-07-06 | University Hospital of the Medical University of Warsaw Insufficient fulfilment of data breach notification obligations | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 33Art. 34 | €2,120 |
| 2022-06-06 | Esselmann Technika Pojazdowa Sp. z o.o. Sp. k. Insufficient fulfilment of data breach notification obligations | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 33 | €3,500 |
| 2022-05-31 | Stołeczny Ośrodek dla Osób Nietrzeźwych Insufficient legal basis for data processing | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 5Art. 6 | €2,100 |
| 2022-03-23 | POLAND DPA: Insufficient cooperation with supervisory authority Insufficient cooperation with supervisory authority | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 31Art. 58 | €490 |
| 2022-01-19 | Fortum Marketing and Sales Polska S.A. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 5Art. 24Art. 25Art. 28 | €1,000,000 |
| 2022-01-19 | Santander Bank Polska S. A. Insufficient fulfilment of data breach notification obligations | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 34 | €117,000 |
| 2022-01-19 | PIKA Sp. z o.o. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 28Art. 32 | €53,000 |
| 2021-12-09 | Warsaw University of Technology Insufficient technical and organisational measures to ensure information security | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 5Art. 24Art. 25Art. 32 | €10,000 |
| 2021-12-01 | Pactum Poland Sp. z o.o. Insufficient cooperation with supervisory authority | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 31Art. 58 | €4,000 |
| 2021-10-14 | Bank Millennium S.A Insufficient fulfilment of data breach notification obligations | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 33Art. 34 | €78,000 |
| 2021-08-13 | President of the Zgierz District Court Insufficient technical and organisational measures to ensure information security | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 5Art. 25Art. 32 | €2,200 |
| 2021-06-30 | Fundację Promocji Mediacji i Edukacji Prawnej Lex Nostra Insufficient fulfilment of data breach notification obligations | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 33Art. 34 | €3,000 |