- Enforcing jurisdiction
- Poland · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Sopockie Towarzystwo Ubezpieczeń ERGO Hestia S.A. – €35,300 Fine (Poland, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Sopockie Towarzystwo Ubezpieczeń ERGO Hestia S.A. sent an email containing a customer's personal data to the wrong person. They failed to notify the Polish data protection authority and the affected customer about this data breach in time. This case highlights the importance of promptly reporting data breaches to protect customer privacy.
What happened
The company sent an email with personal data of a customer to the wrong recipient.
Who was affected
The affected person was a customer whose name, address, and insurance details were leaked.
What the authority found
The authority found that the company did not inform the data protection authority or the customer about the breach within the required 72 hours.
Why this matters
This ruling emphasizes the need for companies to have clear procedures for reporting data breaches. Failing to do so can lead to significant fines and damage to reputation.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 12 March 2026.
Processing notes: amount discrepancy, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The controller had sent an email to that contained personal data of a customer to the wrong recipient. The leaked data included data such as the name, postal address of the data subject and insurance details. In this context the controller had not informed either the Polish DPA nor the data subjects about the data breach in a timely manner within 72 hours.
Related Enforcement Actions (0)
No other enforcement actions found for Sopockie Towarzystwo Ubezpieczeń ERGO Hestia S.A. in PL
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
21 June 2021
Authority
Urząd Ochrony Danych Osobowych
Fine Amount
€35,300
Enforcement Tracker ID
ETid-741
About this data
Cite as: Cookie Fines. Sopockie Towarzystwo Ubezpieczeń ERGO Hestia S.A. - Poland (2021). Retrieved from cookiefines.eu
Last updated: