Polish Minister of Health
€23,000
Insufficient technical and organisational measures to ensure information security
Decision Date
20 de dezembro de 2023
Authority
Polish National Personal Data Protection Office (UODO)
PL
Sector
Health Care
Country
PL
Law
GDPRStatus
FINALDescription
The Polish DPA has imposed a fine of EUR 23,000 on the Polish Minister of Health. The controller had accessed information via a database relating to a physician who had prescribed themselves psychotropic drugs and then later published this information on a social network.
Legal Citations
Art. 25 (1)Art. 32 (1)Art. 34 (2)
Issues & Violations
Insufficient technical and organisational measures to ensure information security