Sąd Okręgowy w Krakowie – €2,324 Fine (Poland, 2023)

€2,324Urząd Ochrony Danych Osobowych19 December 2023Poland
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The District Court in Krakow was fined EUR 2,324 for mishandling personal data during a postal delivery. This is important because it shows that courts must follow the same data protection rules as everyone else. Protecting personal information is essential for maintaining trust.

What happened

The District Court in Krakow mishandled personal data related to a damaged postal delivery, failing to notify the data protection authority.

Who was affected

Individuals whose personal data, including names and bank account numbers, were involved in the postal delivery incident.

What the authority found

The Polish data protection authority determined that the court did not meet its obligations under GDPR to notify about the data breach.

Why this matters

This ruling emphasizes that even judicial bodies must adhere to data protection laws. Other organizations should review their data handling practices to avoid similar issues.

GDPR Articles Cited

AI-verified

Art. 33(GDPR)
Art. 34(1) GDPR
Art. 34(2) GDPR
Art. 55(3) GDPR
View original scraped data
Art. 33(GDPR)
Art. 34(1) GDPR
Art. 34(2) GDPR
Art. 55(3) GDPR

Original data from scraper before AI verification against source document.

Source verified 16 March 2026
articles corrected
national law identified
amount discrepancy
Full Legal Summary
Detailed

The Polish Minister of Foreign Affairs ('Minister') informed the DPA that the Consulate General of the Republic of Poland ('Consulate') sent, at the request of the District Court of Kraków ('Court'), correspondence through a postal operator to an addressee. The addressee informed the Consulate that a delivered parcel was damaged, additionally wrapped and was incomplete. The infringement covered a various categories of personal data, namely first and last names, ID numbers, addresses of residence, dates of birth, bank account numbers, photographs. Personal data of two children were also breached. The DPA identified the court as a controller of the data affected by the breach. It invited the Court to indicate whether a risk analysis had been done to assess whether a data protection breach required notifying the DPA and the affected individuals under Articles 33 and 34 GDPR. In its defence, the court referred to Article 175dd of the Law on the Common Court System, stating that the District Court of Kraków, under the President of the Court of Appeal in Krakow, is responsible for overseeing data processing in court proceedings and legal protection tasks. As a response, the DPA clarified that it was the competent authority to investigate the infringement in question. However, the Court reiterated its stance, referencing various articles of the Law on the System of Common Courts and a decision by the CJEU from March 24, 2022 ([https://curia.europa.eu/juris/document/document.jsf?text=&docid=256461&pageIndex=0&doclang=EN&mode=lst&dir=&occ=first&part=1&cid=3577006 Case C-245/20]). The Court emphasized that the protection of judicial independence is paramount, stating that judicial functions should be exercised independently without external interference or pressure. They asserted that the administration of justice encompasses all operations related to judicial activities, including informing parties about court proceedings. Additionally, the Court referenced a decision by

Related Enforcement Actions (0)

No other enforcement actions found for Sąd Okręgowy w Krakowie in PL

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

19 December 2023

Authority

Urząd Ochrony Danych Osobowych

Fine Amount

€2,324

GDPRhub ID

gdprhub-7732

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Sąd Okręgowy w Krakowie - Poland (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: