- Enforcing jurisdiction
- Poland · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Sąd Okręgowy w Krakowie – €2,324 Fine (Poland, 2023)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Polish Data Protection Authority fined the Polish Minister of Foreign Affairs EUR 2,324 for mishandling personal data during a postal operation. This case is important because it shows that government entities must also follow data protection rules when handling sensitive information. Fines like this can encourage better practices in data management.
What happened
The Polish Minister of Foreign Affairs was fined for failing to properly manage personal data during a postal operation.
Who was affected
Individuals whose personal data was included in the damaged parcel sent by the Consulate.
What the authority found
The authority ruled that the Minister did not fulfill its obligations under GDPR to protect personal data.
Why this matters
This ruling highlights that government bodies are not exempt from data protection laws. It stresses the need for all organizations to ensure proper data handling practices.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 16 March 2026.
Processing notes: articles corrected, national law identified, amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Polish Minister of Foreign Affairs ('Minister') informed the DPA that the Consulate General of the Republic of Poland ('Consulate') sent, at the request of the District Court of Kraków ('Court'), correspondence through a postal operator to an addressee. The addressee informed the Consulate that a delivered parcel was damaged, additionally wrapped and was incomplete. The infringement covered a various categories of personal data, namely first and last names, ID numbers, addresses of residence, dates of birth, bank account numbers, photographs. Personal data of two children were also breached. The DPA identified the court as a controller of the data affected by the breach. It invited the Court to indicate whether a risk analysis had been done to assess whether a data protection breach required notifying the DPA and the affected individuals under Articles 33 and 34 GDPR. In its defence, the court referred to Article 175dd of the Law on the Common Court System, stating that the District Court of Kraków, under the President of the Court of Appeal in Krakow, is responsible for overseeing data processing in court proceedings and legal protection tasks. As a response, the DPA clarified that it was the competent authority to investigate the infringement in question. However, the Court reiterated its stance, referencing various articles of the Law on the System of Common Courts and a decision by the CJEU from March 24, 2022 ([https://curia.europa.eu/juris/document/document.jsf?text=&docid=256461&pageIndex=0&doclang=EN&mode=lst&dir=&occ=first&part=1&cid=3577006 Case C-245/20]). The Court emphasized that the protection of judicial independence is paramount, stating that judicial functions should be exercised independently without external interference or pressure. They asserted that the administration of justice encompasses all operations related to judicial activities, including informing parties about court proceedings. Additionally, the Court referenced a decision by
Related Enforcement Actions (0)
No other enforcement actions found for Sąd Okręgowy w Krakowie in PL
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
19 December 2023
Authority
Urząd Ochrony Danych Osobowych
Fine Amount
€2,324
About this data
Cite as: Cookie Fines. Sąd Okręgowy w Krakowie - Poland (2023). Retrieved from cookiefines.eu
Last updated: