- Enforcing jurisdiction
- Poland · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Housing association – €321 Fine (Poland, 2023)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A housing association in Poland was fined EUR 321 for not reporting a data breach in time. This is crucial because it highlights the responsibility of organizations to notify authorities and affected individuals about breaches. Timely reporting can help mitigate harm.
What happened
The housing association failed to report a data breach involving stolen documents promptly.
Who was affected
Individuals whose documents were stolen in the data breach at the housing association.
What the authority found
The Polish Data Protection Authority found that the housing association did not notify the DPA or affected individuals about the breach in a timely manner.
Why this matters
This case emphasizes the need for organizations to have clear protocols for reporting data breaches. Delays can lead to fines and increased risk for affected individuals.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 17 March 2026.
Processing notes: amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Polish DPA has imposed a fine of EUR 321 on a housing association. The controller had suffered a data breach involving the theft of documents, including a copy of a notarial deed. During its investigation, the DPA found that the controller had both failed to report the data breach to the DPA in a timely manner and to notify the data subjects affected by the incident. Further, the DPA found that the controller had not adequately checked if the processor provided sufficient guarantees to implement appropriate technical and organisational measures to ensure data protection.
Related Enforcement Actions (0)
No other enforcement actions found for Housing association in PL
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
7 February 2023
Authority
Urząd Ochrony Danych Osobowych
Fine Amount
€321
About this data
Cite as: Cookie Fines. Housing association - Poland (2023). Retrieved from cookiefines.eu
Last updated: