Details:
| Summary | The Polish DPA has imposed a fine of EUR 19,800 on the National Prosecutor’s Office. During a press conference, the public prosecutor’s office disclosed an individual’s personal data, such as their first and last name and special categories of data, without a valid legal basis. The DPA also found that the controller failed to report the data breach to the DPA and the data subject. |
| Link: | link link |
| Related articles: | Art. 6 (1) GDPR, Art. 9 (1) GDPR, Art. 33 (1) GDPR, Art. 34 (1) GDPR |
| Type: | Insufficient legal basis for data processing |
| Fine: | EUR 19,800 |
| Sector | Public Sector and Education |
All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/