Poczta Polska SA (Polish Post)

€6,300,000

Insufficient legal basis for data processing

Дата принятия решения

17 марта 2025 г.

Авторитет

Polish National Personal Data Protection Office (UODO)

PL

Сектор

Transportation and Energy

Страна

PL

Закон

GDPR

Статус

FINAL

Описание

The Polish DPA has imposed a fine of EUR 6.3 million on Poczta Polska SA (Polish Post) for the unlawful disclosure of personal data of over 30 million citizens from the PESEL database, in connection with the planned postal vote during the Covid-19 pandemic. Although the law amending the electoral regulations had not yet come into effect, the Ministry of Digital Affairs transferred sensitive data such as names, addresses, and PESEL numbers to the postal company. The data was only deleted weeks later—too late, according to the DPA, and in violation of data protection regulations.

Юридические цитаты

Art. 6 (1)

Проблемы и нарушения

Insufficient legal basis for data processing

Будьте в курсе событий, связанных с соблюдением конфиденциальности

Мы уважаем вашу конфиденциальность. Одно письмо в месяц, без спама, отказ от подписки в любое время.