Chief Commander of the Police: Insufficient legal basis for data processing
€17,600 fine - Polish National Personal Data Protection Office (UODO)
Content
The Polish DPA has fined the Chief Commander of the Polish Police EUR 17,600. During a press conference, the Chief Commander of the Police disclosed the personal and medical data of an individual who had had an abortion which had been the subject of an investigation by the Polish police. The disclosure was specific enough to allow a third party to identify the person. This resulted in the specific danger of discrimination, loss of reputation and loss of control over their own data. Therefore, the Polish DPA decided to classify the violation as one of significant importance and serious nature.
GDPR Articles: Art. 6 (1) GDPR, Art. 9 (1) GDPR
Industry: Public Sector and Education