# Panek SA: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Polish National Personal Data Protection Office (UODO)
- Date: 2024-12-23
- Original: https://www.enforcementtracker.com/ETid-2763
- Canonical: https://overview.legal/posts/48878
- Topics: Security, Processing Agreement, Controllers, Personal Data, Law Enforcement, Supervisory Authorities, Data Controller

## Summary

The Polish DPA has imposed a fine of EUR 357,000 on Panek SA. During the reconstruction of its website, the controller failed to implement adequate technical and organisational measures to ensure data security, resulting in leak of customer data. The controller appealed against the decision, but the provincial administrative court in Warsaw dismissed the appeal.

## Full text

The Polish DPA has imposed a fine of EUR 357,000 on Panek SA. During the reconstruction of its website, the controller failed to implement adequate technical and organisational measures to ensure data security, resulting in leak of customer data. The controller appealed against the decision, but the provincial administrative court in Warsaw dismissed the appeal.

GDPR Articles: Art. 32 (1), (2) GDPR
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/48878 · 2026-08-22