Enforcement · Polish National Personal Data Protection Office (UODO) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Centrum Medyczne Ujastek Sp. z o.o.: Non-compliance with general data processing principles

€273,000 Fine
Centrum Medyczne Ujastek Sp. z o.o.
POLAND
Art. 5 GDPR Art. 6 GDPR Art. 9 GDPR Art. 13 GDPR Art. 25 GDPR Art. 32 GDPR
Encryption Healthcare Healthcare Fines Security Controllers Monitoring IP Address
Jan 17, 2024 Source

How it connects

Related across sources

News De Deense beschermingsautoriteit (SA) heeft verklaard dat het gebruik van Google Analytics onrechtmatig is zonder aanvullende maatregelen. Datatilsynet News Danish SA Declares Use of Google Analytics Unlawful Without Supplementary Measures Datatilsynet News Irish Data Protection Commissioner Fines Instagram EUR 405M for Children Privacy Violations Hunton Andrews Kurth Guidance EDPB Annual Report 2021 EDPB Guidance Guidelines 2/2018 on derogations of Article 49 under Regulation 2016/679 EDPB Case Law SG Nürnberg - S 5 SF 65/24 DS Social Court Nuremberg

Full text

The Polish DPA has imposed two fines on the medical facility “Centrum Medyczne Ujastek” totaling approximately EUR 273,000. The first fine of approximately EUR 163,000 was imposed for the unlawful installation of surveillance equipment in two neonatal rooms. These devices recorded images of newborns and their mothers during intimate acts such as breastfeeding or care without informing patients or staff, which constitutes a violation of data protection regulations. The second fine, of around EUR 110,000, was imposed due to the loss or theft of memory cards on which these recordings were stored. The cards were not encrypted and the devices were not configured in accordance with the required security standards. It was also found that the risk analysis of the center did not take into account the dangers that led to this incident. ---UPDATE--- Following an appeal by the controller, the Provincial Administrative Court in Warsaw upheld the imposed fine.

Industry: Health Care

Original document at the source uodo.gov.pl

Similar Content