# Mayor: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Polish National Personal Data Protection Office (UODO)
- Date: 2022-11-02
- Original: https://www.enforcementtracker.com/ETid-1494
- Canonical: https://overview.legal/posts/47609
- Topics: Data Breaches, Security, Privacy by Design & Default, Public Authority, IP Address, Processing Agreement, Education, Personal Data, Public Sector, Law Enforcement

## Summary

The Polish DPA has imposed a fine of EUR 1,700 on the mayor of Dobrzyniewo Duże municipality. The mayor had reported a data breach to the DPA pursuant to Art. 33 GDPR. An employee's work computer, which contained personal data, had been stolen. During its investigation, the DPA determined that the data on the computer was not adequately secured and that the municipality had failed to take appropriate technical measures to protect personal data.

## Full text

The Polish DPA has imposed a fine of EUR 1,700 on the mayor of Dobrzyniewo Duże municipality. The mayor had reported a data breach to the DPA pursuant to Art. 33 GDPR. An employee's work computer, which contained personal data, had been stolen. During its investigation, the DPA determined that the data on the computer was not adequately secured and that the municipality had failed to take appropriate technical measures to protect personal data.

GDPR Articles: Art. 5 (1) f) GDPR, Art. 5 (2) GDPR, Art. 25 (1) GDPR, Art. 32 (1), (2) GDPR
Industry: Public Sector and Education

---
Generated by overview.legal · https://overview.legal/posts/47609 · 2026-08-22