Warsaw University of Life Sciences
€11,200
Insufficient technical and organisational measures to ensure information security
Decision Date
September 8, 2020
Authority
Polish National Personal Data Protection Office (UODO)
PL
Sector
Public Sector and Education
Country
PL
Law
GDPRStatus
FINALDescription
Theft of a private notebook belonging to a university employee who also used this device for business purposes and on which personal data of candidates for study at SGGW was contained for recruitment activities.
Legal Citations
Art. 32
Issues & Violations
Insufficient technical and organisational measures to ensure information security