Res-Gastro M. Gaweł Sp. k. – €56,000 Fine (Poland, 2024)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Res-Gastro M. Gaweł Sp. k. received a fine for losing an unencrypted USB stick that contained personal data of an employee. The company did not have enough security measures in place to protect this information. This ruling emphasizes the need for businesses to take data protection seriously.
What happened
An employee lost an unencrypted USB stick containing personal data of another employee.
Who was affected
The employee whose data was on the lost USB stick was directly affected.
What the authority found
The Polish Data Protection Authority determined that the company did not implement necessary technical and organizational measures to safeguard personal data, violating GDPR.
Why this matters
This ruling highlights the importance of data security for businesses. Companies must ensure they have effective measures to protect sensitive information to avoid penalties.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 12 March 2026.
Processing notes: amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Polish DPA (UODO) has imposed a fine of EUR 56,000 on Res-Gastro M. Gaweł Sp. k. The controller had reported a data breach involving the loss of an unencrypted USB stick by an employee. The data medium contained documents with data such as name, adress, gender, date of birth etc. of another employee. During its investigation, the DPA found that the controller had failed to implement appropriate technical and organizational measures to protect personal data in order to prevent such an incident.
Related Enforcement Actions (1)
Other enforcement actions involving Res-Gastro M. Gaweł Sp. k. in PL
Details
Fine Date
29 April 2024
Authority
Urząd Ochrony Danych Osobowych
Fine Amount
€56,000
About this data
Cite as: Cookie Fines. Res-Gastro M. Gaweł Sp. k. - Poland (2024). Retrieved from cookiefines.eu
Last updated: