Enforcement · Polish National Personal Data Protection Office (UODO) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
University Hospital of the Medical University of Warsaw: Insufficient fulfilment of data breach notification obligations
The Polish DPA has imposed a fine of EUR 2,120 on the University Hospital of the Medical University of Warsaw.
Full text
The Polish DPA has imposed a fine of EUR 2,120 on the University Hospital of the Medical University of Warsaw. The university hospital had suffered a data breach in which a patient had received a referral from a doctor that contained, among other things, personal data (name, address, etc.) of another patient. The DPA found that neither the doctor nor the hospital informed the patient or the DPA about the data breach.
Industry: Health Care
How it connects
Related across sources
art 33 Notification of a personal data breach to the supervisory authority Apr 27, 2016 Data Breaches Notification Obligation Notified Body Reporting and Notification Obligations
Guidelines 01/2021 Examples regarding Personal Data Breach Notification Guidelines ·EDPB Jan 3, 2022 Notification Obligation Data Breaches Personal Data
Guidelines 10/2020 restrictions under Article 23 GDPR Guidelines ·EDPB Oct 13, 2021 GDPR Subject-Matter and Objectives Right to Restriction Data Portability
Guidelines 04/2022 calculation of administrative fines under the GDPR Guidelines ·EDPB May 24, 2023 Fines Notified Body Reporting and Notification Obligations Supervision
Opinion 28/2022 Europrivacy criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Opinion ·EDPB Oct 10, 2022 Certification Notified Body Reporting and Notification Obligations Accountability
Opinion 2/2026 EDPB-EDPS Joint opinion 2/2026 on the Proposal for a Regulation as regards the simplification of the digital legislative framework ( EDPB, EDPB-EDPS Joint opinion 2/2026 on the Proposal for a Regulation as regards the simplification of the digital legislative framework (Digital Omnibus) Opinion Feb 11, 2026 Notified Body Reporting and Notification Obligations Notification Obligation Data Breaches