- Enforcing jurisdiction
- Poland · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Santander Bank Polska S.A. – €326,000 Fine (Poland, 2024)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Santander Bank Polska S.A. was fined EUR 326,000 for failing to report a data breach to both the DPA and affected individuals on time. This case emphasizes the need for banks to protect their customers' data and communicate effectively during breaches.
What happened
Santander Bank Polska S.A. did not report a data breach to the Polish DPA and data subjects in a timely manner.
Who was affected
Customers whose personal information was affected by the data breach.
What the authority found
The Polish DPA determined that Santander Bank Polska S.A. violated Article 33(1) and Article 34(1) GDPR by not reporting the breach promptly.
Why this matters
This ruling underscores the critical need for financial institutions to have robust data protection practices. Companies must ensure they are prepared to inform both authorities and affected individuals swiftly in the event of a breach.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 6 March 2026.
Processing notes: articles corrected, amount discrepancy, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Polish DPA has fined Santander Bank Polska S.A. EUR 326,000 for failing to report a data breach to the DPA and data subjects in a timely manner.
Related Enforcement Actions (0)
No other enforcement actions found for Santander Bank Polska S.A. in PL
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
12 March 2024
Authority
Urząd Ochrony Danych Osobowych
Fine Amount
€326,000
Enforcement Tracker ID
ETid-2260
About this data
Cite as: Cookie Fines. Santander Bank Polska S.A. - Poland (2024). Retrieved from cookiefines.eu
Last updated: