- Enforcing jurisdiction
- Poland · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Warsaw University of Technology – €10,000 Fine (Poland, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Warsaw University of Technology was fined €10,000 for a data breach that exposed personal information of over 5,000 individuals. The university failed to implement adequate security measures to protect this data. This case serves as a reminder for educational institutions to prioritize data security.
What happened
Warsaw University of Technology reported a data breach that exposed personal data of students and faculty.
Who was affected
Over 5,000 students and faculty members were affected by the data breach.
What the authority found
The Polish Data Protection Authority found that the university did not take necessary steps to secure personal data, violating GDPR requirements.
Why this matters
This ruling highlights the importance of data security in educational institutions. Other universities should review their security practices to prevent similar breaches.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 14 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Polish DPA (UODO) has fined Warsaw University of Technology EUR 10,000. The university had reported a data breach to the authority pursuant to Art. 33 GDPR. One of the university's organizational units used an application created by university staff to register for courses and access teaching history, assessment of exam results and billing of fees. In early January 2020, an unauthorized person had downloaded a database from the application that contained personal data of students and faculty (over 5,000 individuals). In its investigation, the DPA found that the Unvierstät had failed to implement appropriate technical and organizational measures that ensured the security of personal data . The DPA also found that the university had not conducted a formal risk assessment.
Related Enforcement Actions (0)
No other enforcement actions found for Warsaw University of Technology in PL
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
9 December 2021
Authority
Urząd Ochrony Danych Osobowych
Fine Amount
€10,000
About this data
Cite as: Cookie Fines. Warsaw University of Technology - Poland (2021). Retrieved from cookiefines.eu
Last updated: