Company – €7,200 Fine (Poland, 2023)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A Polish company was fined €7,200 for not securing personal data properly, leading to a data breach. The Polish data protection authority found the company didn't have enough safeguards in place and didn't check if their service provider could protect the data. This case highlights the importance of having strong security measures and checking partners' data protection capabilities.
What happened
A company in Poland suffered a data breach due to inadequate security measures.
Who was affected
Individuals whose personal data was lost in the data breach.
What the authority found
The Polish data protection authority found the company failed to implement proper security measures, violating GDPR's requirements for data protection and accountability.
Why this matters
This case underscores the need for businesses to ensure robust data protection practices and to verify that their service providers can adequately protect personal data. It serves as a reminder that failing to secure personal data can lead to regulatory fines.
GDPR Articles Cited
The Polish DPA has imposed a fine of EUR 7,200 on a company. The controller had suffered a data breach that resulted in the loss of personal data. During its investigation, the DPA found that the controller had failed to implement adequate technical and organizational measures to protect personal data, which facilitated the data breach. The controller had failed to conduct certain risk analyses, for example. In addition, the DPA found that the controller failed to review its processor and ensure that it provided sufficient guarantees to protect personal data.
Related Enforcement Actions (8)
Other enforcement actions involving Company in PL
Fine
€7K
Details
Fine Date
8 February 2023
Authority
Urząd Ochrony Danych Osobowych
Fine Amount
€7,200
Enforcement Tracker ID
ETid-1808
About this data
Cite as: Cookie Fines. Company - Poland (2023). Retrieved from cookiefines.eu
Last updated: