# Sub Agent: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Polish National Personal Data Protection Office (UODO)
- Date: 2026-04-13
- Original: https://www.enforcementtracker.com/ETid-3203
- Canonical: https://overview.legal/posts/291281
- Topics: Personal Data

## Summary

Art. 28 (4) GDPR, Art. 32 (1), (2) GDPR · Sector: Industry and Commerce · Decided 2026-04-13

## Full text

Polish National Personal Data Protection Office (UODO) fined Sub Agent €2,415 on 2026-04-13 for: Insufficient technical and organisational measures to ensure information security.
GDPR Articles: Art. 28 (4) GDPR, Art. 32 (1), (2) GDPR
Sector: Industry and Commerce
Country: Poland
Source: https://orzeczenia.uodo.gov.pl/document/urn:ndoc:gov:pl:uodo:2022:dkn_5131_7/content?query=

---
Generated by overview.legal · https://overview.legal/posts/291281 · 2026-08-22