National Prosecutor's Office
€19,800
Insufficient legal basis for data processing
Decision Date
September 2, 2024
Authority
Polish National Personal Data Protection Office (UODO)
PL
Sector
Public Sector and Education
Country
PL
Law
GDPRStatus
FINALDescription
The Polish DPA has imposed a fine of EUR 19,800 on the National Prosecutor's Office. During a press conference, the public prosecutor's office disclosed an individual's personal data, such as their first and last name and special categories of data, without a valid legal basis. The DPA also found that the controller failed to report the data breach to the DPA and the data subject.
Legal Citations
Art. 6 (1)Art. 9 (1)Art. 33 (1)Art. 34 (1)
Issues & Violations
Insufficient legal basis for data processing