PIONIER (law firm) – €9,600 Fine (Poland, 2022)

€9,600Urząd Ochrony Danych Osobowych30 November 2022Poland
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Poland's data protection authority fined the law firm PIONIER EUR 9,600 for processing potential clients' data without a valid legal basis. This matters because it underscores the importance of obtaining clear, provable consent before processing personal data.

What happened

PIONIER processed potential clients' personal data without a valid legal basis.

Who was affected

Potential clients of PIONIER whose data was collected from public sources without proper consent.

What the authority found

The authority found that PIONIER lacked a valid legal basis for processing personal data, as consent was not properly documented.

Why this matters

This case serves as a warning to businesses to ensure they have a clear legal basis for data processing and that consent is properly documented. It highlights the need for transparency and accountability in data handling practices.

GDPR Articles Cited

Art. 9 GDPR
Art. 5(1)(a) GDPR
Art. 6(1) GDPR
Full Legal Summary
Detailed

The Polish DPA has imposed a fine of EUR 9,600 on the law firm PIONIER. The law firm mainly represents victims of traffic accidents in proceedings against insurance companies and other entities. In this context, it supports its clients in claims for damages as well as claims for reimbursement of medical treatment costs. During its investigation, the DPA found that the law firm processed personal data, including health data, of potential clients without a valid legal basis. The law firm obtained personal data of potential clients based on press releases as well as social media reports. This allowed it to contact potential clients and offer them its services. During an initial conversation, they asked them for their verbal consent to process their personal data up until the conclusion of a contract. However, the DPA found that the consent should have been given in a way that it could still be proven at a later stage (e.g., through a register of consents).

Related Enforcement Actions (0)

No other enforcement actions found for PIONIER (law firm) in PL

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

30 November 2022

Authority

Urząd Ochrony Danych Osobowych

Fine Amount

€9,600

Enforcement Tracker ID

ETid-1632

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. PIONIER (law firm) - Poland (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: