# Polish Minister of Health: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Polish National Personal Data Protection Office (UODO)
- Date: 2023-12-20
- Original: https://www.enforcementtracker.com/ETid-2171
- Canonical: https://overview.legal/posts/48286
- Topics: Healthcare, Security, Controllers, Personal Data, Processing Agreement, Supervisory Authorities, Data Controller

## Summary

The Polish DPA has imposed a fine of EUR 23,000 on the Polish Minister of Health. The controller had accessed information via a database relating to a physician who had prescribed themselves psychotropic drugs and then later published this information on a social network.

## Full text

The Polish DPA has imposed a fine of EUR 23,000 on the Polish Minister of Health. The controller had accessed information via a database relating to a physician who had prescribed themselves psychotropic drugs and then later published this information on a social network.

GDPR Articles: Art. 25 (1) GDPR, Art. 32 (1), (2) GDPR, Art. 34 (2) GDPR
Industry: Health Care

---
Generated by overview.legal · https://overview.legal/posts/48286 · 2026-08-22