Enforcement
EN National Prosecutor's Office: Insufficient legal basis for data processing
€19,800 fine - Polish National Personal Data Protection Office (UODO)
Content
The Polish DPA has imposed a fine of EUR 19,800 on the National Prosecutor's Office. During a press conference, the public prosecutor's office disclosed an individual's personal data, such as their first and last name and special categories of data, without a valid legal basis. The DPA also found that the controller failed to report the data breach to the DPA and the data subject.
GDPR Articles: Art. 6 (1) GDPR, Art. 9 (1) GDPR, Art. 33 (1) GDPR, Art. 34 (1) GDPR
Industry: Public Sector and Education