Głównego Geodetę Kraju – €12,450 Fine (Poland, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Polish data authority fined the public cartography institute for not reporting a data breach. Land register numbers were visible on their website, revealing personal details. This case shows the need for quick action and transparency when data breaches occur.
What happened
The public cartography institute exposed land register numbers on its website for over 48 hours without reporting the breach.
Who was affected
Property owners whose personal information could be identified through the exposed land register numbers.
What the authority found
The Polish DPA found that the institute violated GDPR by not reporting the breach and not informing affected individuals.
Why this matters
The ruling underscores the importance of promptly reporting data breaches and notifying affected individuals. Organizations should have clear procedures for handling such incidents to avoid penalties.
GDPR Articles Cited
The Polish DPA has imposed a fine of EUR 12,450 on the public cartography institute Głównego Geodetę Kraju. The institute had suffered a data breach in which numerous land register numbers were visible on the institute's website for more than 48 hours. The land register number allows a number of owners' data to be determined, including their first and last names, the names of their parents and the address of the property. The institute had failed to report the breach to the DPA, with the result that it learned of the incident through media reports. The institute also failed to inform the data subjects of the incident. For this reason, the DPA found that the controller violated Article 33 (1) GDPR and Article 34 (1) GDPR.
Related Enforcement Actions (0)
No other enforcement actions found for Głównego Geodetę Kraju in PL
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
6 July 2022
Authority
Urząd Ochrony Danych Osobowych
Fine Amount
€12,450
Enforcement Tracker ID
ETid-1269
About this data
Cite as: Cookie Fines. Głównego Geodetę Kraju - Poland (2022). Retrieved from cookiefines.eu
Last updated: