Disciplinary officer
€5,400
Insufficient technical and organisational measures to ensure information security
Decision Date
April 20, 2023
Authority
Polish National Personal Data Protection Office (UODO)
PL
Sector
Public Sector and Education
Country
PL
Law
GDPRStatus
FINALDescription
The Polish DPA has imposed a fine of EUR 5,400 on a disciplinary officer of the Polish Bar Association after an unencrypted USB stick containing personal data was lost.
Legal Citations
Art. 5 (1)Art. 5 (2)Art. 25 (1)Art. 32 (1)
Issues & Violations
Insufficient technical and organisational measures to ensure information security