National Prosecutor's Office
€19,800
Insufficient legal basis for data processing
決定日期
2024年9月2日
權限
Polish National Personal Data Protection Office (UODO)
PL
部門
Public Sector and Education
國家
PL
法律
GDPR狀態
FINAL說明
The Polish DPA has imposed a fine of EUR 19,800 on the National Prosecutor's Office. During a press conference, the public prosecutor's office disclosed an individual's personal data, such as their first and last name and special categories of data, without a valid legal basis. The DPA also found that the controller failed to report the data breach to the DPA and the data subject.
法律引文
Art. 6 (1)Art. 9 (1)Art. 33 (1)Art. 34 (1)
問題與違規
Insufficient legal basis for data processing