National Prosecutor's Office
€19,800
Insufficient legal basis for data processing
Datum för beslut
2 september 2024
Myndighet
Polish National Personal Data Protection Office (UODO)
PL
Sektor
Public Sector and Education
Land
PL
Lag
GDPRStatus
FINALBeskrivning
The Polish DPA has imposed a fine of EUR 19,800 on the National Prosecutor's Office. During a press conference, the public prosecutor's office disclosed an individual's personal data, such as their first and last name and special categories of data, without a valid legal basis. The DPA also found that the controller failed to report the data breach to the DPA and the data subject.
Rättsliga hänvisningar
Art. 6 (1)Art. 9 (1)Art. 33 (1)Art. 34 (1)
Frågor och överträdelser
Insufficient legal basis for data processing