- Enforcing jurisdiction
- Poland · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
University Hospital of the Medical University of Warsaw – €2,120 Fine (Poland, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Polish DPA fined the University Hospital of the Medical University of Warsaw for a data breach involving patient information. A doctor mistakenly sent a referral containing another patient's personal data. This case shows the importance of promptly reporting data breaches.
What happened
The hospital was fined for failing to report a data breach where a patient received another patient's personal information.
Who was affected
Patients whose personal data was exposed in the breach were affected.
What the authority found
The DPA found that the hospital did not inform the affected patient or the authority about the breach, violating GDPR rules.
Why this matters
This fine highlights the need for healthcare providers to have robust data protection measures and to report breaches promptly. It serves as a warning to other organizations about the consequences of non-compliance.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 16 March 2026.
Processing notes: articles corrected, amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Polish DPA has imposed a fine of EUR 2,120 on the University Hospital of the Medical University of Warsaw. The university hospital had suffered a data breach in which a patient had received a referral from a doctor that contained, among other things, personal data (name, address, etc.) of another patient. The DPA found that neither the doctor nor the hospital informed the patient or the DPA about the data breach.
Related Enforcement Actions (0)
No other enforcement actions found for University Hospital of the Medical University of Warsaw in PL
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
6 July 2022
Authority
Urząd Ochrony Danych Osobowych
Fine Amount
€2,120
Enforcement Tracker ID
ETid-1317
About this data
Cite as: Cookie Fines. University Hospital of the Medical University of Warsaw - Poland (2022). Retrieved from cookiefines.eu
Last updated: