Panek SA
€357,000
Insufficient technical and organisational measures to ensure information security
Decision Date
December 23, 2024
Authority
Polish National Personal Data Protection Office (UODO)
PL
Sector
Industry and Commerce
Country
PL
Law
GDPRStatus
FINALDescription
The Polish DPA has imposed a fine of EUR 357,000 on Panek SA. During the reconstruction of its website, the controller failed to implement adequate technical and organisational measures to ensure data security, resulting in leak of customer data. The controller appealed against the decision, but the provincial administrative court in Warsaw dismissed the appeal.
Legal Citations
Art. 32 (1)
Issues & Violations
Insufficient technical and organisational measures to ensure information security