Res-Gastro M. Gaweł Sp. k. – €56,000 Fine (Poland, 2024)

€56,000Urząd Ochrony Danych Osobowych29 April 2024Poland
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Res-Gastro M. Gaweł Sp. k. received a fine for losing an unencrypted USB stick that contained personal data of an employee. The company did not have enough security measures in place to protect this information. This ruling emphasizes the need for businesses to take data protection seriously.

What happened

An employee lost an unencrypted USB stick containing personal data of another employee.

Who was affected

The employee whose data was on the lost USB stick was directly affected.

What the authority found

The Polish Data Protection Authority determined that the company did not implement necessary technical and organizational measures to safeguard personal data, violating GDPR.

Why this matters

This ruling highlights the importance of data security for businesses. Companies must ensure they have effective measures to protect sensitive information to avoid penalties.

GDPR Articles Cited

AI-verified

Art. 24(1) GDPR
Art. 25(1) GDPR
Art. 32(1) GDPR
View original scraped data
Art. 24(1) GDPR
Art. 25(1) GDPR
Art. 32(1) GDPR
(2) GDPR

Original data from scraper before AI verification against source document.

Source verified 12 March 2026
amount discrepancy
Full Legal Summary
Detailed

The Polish DPA (UODO) has imposed a fine of EUR 56,000 on Res-Gastro M. Gaweł Sp. k. The controller had reported a data breach involving the loss of an unencrypted USB stick by an employee. The data medium contained documents with data such as name, adress, gender, date of birth etc. of another employee. During its investigation, the DPA found that the controller had failed to implement appropriate technical and organizational measures to protect personal data in order to prevent such an incident.

Details

Fine Date

29 April 2024

Authority

Urząd Ochrony Danych Osobowych

Fine Amount

€56,000

Enforcement Tracker ID

ETid-2333

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Res-Gastro M. Gaweł Sp. k. - Poland (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: