Housing Association

€321

Insufficient fulfilment of data breach notification obligations

Fecha de la decisión

7 de febrero de 2023

Autoridad

Polish National Personal Data Protection Office (UODO)

PL

Sector

Real Estate

País

EE

Ley

GDPR

Estado

FINAL

Descripción

The Polish DPA has imposed a fine of EUR 321 on a housing association. The controller had suffered a data breach involving the theft of documents, including a copy of a notarial deed. During its investigation, the DPA found that the controller had both failed to report the data breach to the DPA in a timely manner and to notify the data subjects affected by the incident. Further, the DPA found that the controller had not adequately checked if the processor provided sufficient guarantees to implement appropriate technical and organisational measures to ensure data protection.

Citas legales

Art. 5 (1)Art. 28 (1)Art. 33 (1)Art. 34 (1)

Problemas e infracciones

Insufficient fulfilment of data breach notification obligations

Manténgase al día sobre la aplicación de las normas de protección de la intimidad

Respetamos su intimidad. Un correo electrónico al mes, sin spam, darse de baja en cualquier momento.