Szczecin-Centrum District Court – €6,400 Fine (Poland, 2023)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Szczecin-Centrum District Court in Poland was fined EUR 6,400 for losing data carriers with personal information. The court used private, unencrypted data carriers on official computers, which led to a data breach. This case shows that even courts must follow strict data protection rules.
What happened
The court lost data carriers containing personal data, some of which were private and unencrypted.
Who was affected
Individuals whose personal data was stored on the lost data carriers.
What the authority found
The Polish Data Protection Authority found that the court failed to secure personal data and did not enforce its own regulations against using private data carriers.
Why this matters
This case emphasizes the need for organizations, including public bodies, to enforce data protection policies and ensure data security. It serves as a reminder that failing to secure personal data can lead to fines.
GDPR Articles Cited
The Polish DPA has imposed a fine of EUR 6,400 on the Szczecin-Centrum District Court. The court had reported a data breach to the DPA involving the loss of three data carriers. One data carrier was an official and encrypted one, the other two were private and unencrypted data carriers containing drafts of court rulings and statements with personal data. In the course of its investigation, the DPA discovered that data carriers which had not been checked and secured by the court's IT department had been used on official computers over a period of many years. In addition, the DPA found that although there were regulations prohibiting the use of private data carriers, the court failed to check whether employees actually complied with these regulations. In addition, the court failed to implement technical measures to prevent the use of private data carriers. ---UPDATE--- The Supreme Administrative Court dismissed the appeal by the controller against the judgement made by the Provincial Administrative Court in Warsaw which had upheld the decision of the DPA.
Related Enforcement Actions (0)
No other enforcement actions found for Szczecin-Centrum District Court in PL
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
19 January 2023
Authority
Urząd Ochrony Danych Osobowych
Fine Amount
€6,400
Enforcement Tracker ID
ETid-1688
About this data
Cite as: Cookie Fines. Szczecin-Centrum District Court - Poland (2023). Retrieved from cookiefines.eu
Last updated: