# Housing cooperative: Insufficient fulfilment of data breach notification obligations

- Type: Enforcement
- Source: Polish National Personal Data Protection Office (UODO)
- Date: 2023-03-01
- Original: https://www.enforcementtracker.com/ETid-1759
- Canonical: https://overview.legal/posts/47874
- Topics: Notification Obligation, Data Breaches, Article 19 GDPR - Notification of Rectification, Erasure or Restriction, Notified Body Reporting and Notification Obligations, Personal Data, Controllers, Supervisory Authorities, Law Enforcement, Processing Agreement, Data Controller

## Summary

The Polish DPA has imposed a fine of EUR 11,100 on a housing cooperative. The controller had disclosed personal data of a member of the cooperative to an unauthorized person. The incident was recorded in an internal register of violations, however the controller failed to inform the DPA and the data subject of the incident in a timely manner.

## Full text

The Polish DPA has imposed a fine of EUR 11,100 on a housing cooperative. The controller had disclosed personal data of a member of the cooperative to an unauthorized person. The incident was recorded in an internal register of violations, however the controller failed to inform the DPA and the data subject of the incident in a timely manner.

GDPR Articles: Art. 33 (1) GDPR, Art. 34 (1) GDPR
Industry: Individuals and Private Associations

---
Generated by overview.legal · https://overview.legal/posts/47874 · 2026-08-22