National Prosecutor's Office
€19,800
Insufficient legal basis for data processing
Decision Date
2 de setembro de 2024
Authority
Polish National Personal Data Protection Office (UODO)
PL
Sector
Public Sector and Education
Country
PL
Law
GDPRStatus
FINALDescription
The Polish DPA has imposed a fine of EUR 19,800 on the National Prosecutor's Office. During a press conference, the public prosecutor's office disclosed an individual's personal data, such as their first and last name and special categories of data, without a valid legal basis. The DPA also found that the controller failed to report the data breach to the DPA and the data subject.
Legal Citations
Art. 6 (1)Art. 9 (1)Art. 33 (1)Art. 34 (1)
Issues & Violations
Insufficient legal basis for data processing