- Enforcing jurisdiction
- Poland · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Centrum Medyczne Ujastek Sp. z o.o. – €273,000 Fine (Poland, 2024)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Centrum Medyczne Ujastek was fined €273,000 for illegally installing surveillance cameras in neonatal rooms and losing unencrypted memory cards containing sensitive recordings. This case highlights the importance of protecting personal data and ensuring compliance with data protection laws. It serves as a warning to medical facilities about the serious consequences of data breaches.
What happened
Centrum Medyczne Ujastek was fined for unlawfully installing surveillance equipment and losing unencrypted memory cards.
Who was affected
Newborns and their mothers whose images were recorded without consent.
What the authority found
The Polish DPA imposed fines for violations related to unlawful surveillance and inadequate data security measures.
Why this matters
This case underscores the critical need for medical facilities to comply with data protection laws and implement strong security measures to protect sensitive information.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 6 March 2026.
Processing notes: amount discrepancy, date discrepancy, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Polish DPA has imposed two fines on the medical facility “Centrum Medyczne Ujastek” totaling approximately EUR 273,000. The first fine of approximately EUR 163,000 was imposed for the unlawful installation of surveillance equipment in two neonatal rooms. These devices recorded images of newborns and their mothers during intimate acts such as breastfeeding or care without informing patients or staff, which constitutes a violation of data protection regulations. The second fine, of around EUR 110,000, was imposed due to the loss or theft of memory cards on which these recordings were stored. The cards were not encrypted and the devices were not configured in accordance with the required security standards. It was also found that the risk analysis of the center did not take into account the dangers that led to this incident. ---UPDATE--- Following an appeal by the controller, the Provincial Administrative Court in Warsaw upheld the imposed fine.
Related Enforcement Actions (0)
No other enforcement actions found for Centrum Medyczne Ujastek Sp. z o.o. in PL
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
17 January 2024
Authority
Urząd Ochrony Danych Osobowych
Fine Amount
€273,000
Enforcement Tracker ID
ETid-2518
About this data
Cite as: Cookie Fines. Centrum Medyczne Ujastek Sp. z o.o. - Poland (2024). Retrieved from cookiefines.eu
Last updated: