- Enforcing jurisdiction
- Poland · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Głównego Geodetę Kraju – €12,450 Fine (Poland, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Polish DPA imposed a fine on Głównego Geodetę Kraju for a data breach that exposed sensitive land register information online. The institute failed to report the breach to the authorities or inform affected individuals. This case underscores the importance of timely breach notifications.
What happened
The public cartography institute was fined for failing to report a data breach that made land register numbers publicly visible.
Who was affected
Individuals whose land register information was exposed were affected by the breach.
What the authority found
The DPA determined that the institute violated GDPR by not reporting the breach and not informing the affected individuals.
Why this matters
This ruling stresses the importance of compliance with breach notification requirements. Organizations must ensure they have processes in place to report breaches and protect personal data.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 13 March 2026.
Processing notes: amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Polish DPA has imposed a fine of EUR 12,450 on the public cartography institute Głównego Geodetę Kraju. The institute had suffered a data breach in which numerous land register numbers were visible on the institute's website for more than 48 hours. The land register number allows a number of owners' data to be determined, including their first and last names, the names of their parents and the address of the property. The institute had failed to report the breach to the DPA, with the result that it learned of the incident through media reports. The institute also failed to inform the data subjects of the incident. For this reason, the DPA found that the controller violated Article 33 (1) GDPR and Article 34 (1) GDPR.
Related Enforcement Actions (0)
No other enforcement actions found for Głównego Geodetę Kraju in PL
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
6 July 2022
Authority
Urząd Ochrony Danych Osobowych
Fine Amount
€12,450
Enforcement Tracker ID
ETid-1269
About this data
Cite as: Cookie Fines. Głównego Geodetę Kraju - Poland (2022). Retrieved from cookiefines.eu
Last updated: