- Enforcing jurisdiction
- Poland · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Mayor of Aleksandrów Kujawski – €9,200 Fine (Poland, 2019)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Mayor of Aleksandrów Kujawski was fined for mishandling citizens' personal data by not having proper contracts and security measures in place. This is important because it shows that local governments must also protect personal information. They need to follow rules about how long to keep data and ensure it is secure.
What happened
The Mayor's office outsourced personal data processing without legal agreements and failed to secure video recordings.
Who was affected
Citizens whose personal data was processed by the Mayor's office without proper safeguards.
What the authority found
The authority found multiple violations, including lack of contracts and inadequate data security measures.
Why this matters
This case stresses the importance of compliance with data protection laws for all organizations. Local governments must implement proper data handling practices to protect citizens' information.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 14 March 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
From 28 January - 1 February 2019, the UODO conducted investigation regarding the compliance of processing operations with the GDPR at the Municipal Office of the Mayor of Aleksandrów Kujawski. The UODO found that the local government did not comply with the GDPR because of three main infringements. First, the Municipal Office was outsourcing the processing of citizens’ personal data to a third party without any legal basis. Indeed, the city did not conclude any contractual agreements with the software service provider as foreseen under Art 28(3) GDPR. The UODO found that the local government violated Article 5(1)(a) and (f) of the GDPR. Secondly, the personal data collected were stored without any criteria to determine the retention period. Therefore, the UODO found that this processing violated Article 5(1)(e) of the GDPR. Lastly, the local government did not implement sufficient safeguards to secure a video recording from its Council’s meeting, nor conducted the necessary risk assessment. Therefore, the UODO found that the local government violated Article 5 (1)(f) and (2) of the GDPR.
Related Enforcement Actions (0)
No other enforcement actions found for Mayor of Aleksandrów Kujawski in PL
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
18 October 2019
Authority
Urząd Ochrony Danych Osobowych
Fine Amount
€9,200
40,000 PLN
About this data
Cite as: Cookie Fines. Mayor of Aleksandrów Kujawski - Poland (2019). Retrieved from cookiefines.eu
Last updated: