25 September 2025
… case concerns a complaint to the President of the Personal Data Protection Office lodged by an individual in 2021 about … irregularities in the processing of his or her personal data by an entrepreneur from Silesia voivodeship. That was … case concerns a complaint to the President of the Personal Data Protection Office lodged by an individual in 2021 about …
25 September 2025
… Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 25 (Data protection by design and by default), Article 32 (Security … Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), …
22 June 2019
… Main legal reference Article 33 (Notification of a personal data breach to the supervisory authority) Article 34 (Communication of a personal data breach to the data subject) Keywords Personal data breach Outcome No … complaint and I am of the view that has complied with its data protection obligations. You have explained that …
20 September 2019
… 20 September 2019 Poland The President of the Personal Data Protection Office imposed a fine of an amount higher than … and technical measures for the protection of personal data were not appropriate to the risk posed by the … The President of the Personal Data Protection Office imposed a fine of an amount higher …
12 November 2019
… Article 13 (Information to be provided where personal data are collected from the data subject) Article 14 (Information to be provided where personal data have not been obtained from the data subject) Article … REPUBLIC OF CYPRUS OFFICE OF THE COMMISSIONER FOR PERSONAL DATA PROTECTION Final Decision IMI Article 56 identification …
3 August 2019
… Article 5 (Principles relating to processing of personal data) Keywords Accuracy Data subject rights E-Commerce Outcome No sanction Summary … email correspondence of 14 May 2019 with regard to the data protection complaint that has been raised with the ICO … Reference: Principles relating to processing of personal data (Article 5), Right to rectification (Article 16), Right …
13 January 2021
… Polish DPA & WARTA: Failure to notify a personal data breach without undue delay as a reason for imposing a … Company) infringed the provisions of the General Data Protection Regulation, because it did not notify a … Company) infringed the provisions of the General Data Protection Regulation, because it did not notify a …
28 April 2020
… of processing) Article 15 (Right of access by the data subject) Keywords Consumer protection Right of access Outcome Reprimand Summary 61.6KB … reprimand your company for an infringement of the Gen- eral Data Protection Regulation (GDPR) when processing personal …
25 November 2020
… 25 November 2020 Poland The President of the Personal Data Protection Office, after having conducted ex officio proceedings relating to breach of personal data protection of persons subject to medical quarantine by … The President of the Personal Data Protection Office, after having conducted ex officio …
27 April 2021
… also a failure to cooperate 27 April 2021 Poland The Polish Data protection Authority, stating that PNP SA with its … office in Warsaw violated the provisions of the General Data Protection Regulation, imposed an administrative fine … The Polish Data protection Authority, stating that PNP SA with its …
3 August 2019
… Article 5 (Principles relating to processing of personal data) Keywords Accuracy E-Commerce Outcome No sanction … email correspondence of 20 March 2019 with regard to the data protection complaint that has been raised with the ICO about … Reference: Principles relating to processing of personal data (Article 5), Right to rectification (Article 16), Right …
10 October 2019
… forgotten’)) Article 6 (Lawfulness of processing) Keywords Data retention Right to erasure Outcome No violation Summary … REPUBLIC OF CYPRUS OFFICE OF THE COMMISSIONER FOR PERSONAL DATA PROTECTION Our ref. 11.17.001.006.014 10 October 2019 Data … No infringement of the GDPR Key words: Right to erasure, Data retention, Legal claims, Compliance with a legal …
12 August 2019
… than six months, the controller had neither appointed a data protection officer nor published its contact details or reported those … than six months, the controller had neither appointed a data protection officer nor published its contact details or …
25 September 2025
… Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing) Decision: … fine Key words: Administrative fine, Anti-Money Laundering, Data security, Lawfulness of processing, Data subject rights, Data protection by design and by default Summary of the Decision …
11 September 2020
… 11 September 2020 Poland The President of the Personal Data Protection Office, after having found a personal data … UODO stated that in the case concerned the Data Protection Officer (DPO) performed its tasks without having due regard … The President of the Personal Data Protection Office, after having found a personal data …
7 April 2020
… Main legal reference Article 33 (Notification of a personal data breach to the supervisory authority) Article 34 (Communication of a personal data breach to the data subject) Keywords Data retention Right to erasure … the controller informs the complainant that his personal data have been the subject of a data leak. The controller …
20 July 2020
… authority 20 July 2020 The President of the Personal Data Protection Office (UODO) imposed a fine of PLN 5 000 on an … provide the President of the UODO with access to personal data and other information necessary for the performance of … The President of the Personal Data Protection Office (UODO) imposed a fine of PLN 5 000 on …
5 March 2020
… a school 5 March 2020 Poland The President of the Personal Data Protection Office imposed a fine of PLN 20 000 in connection … with the breach consisting in the processing of biometric data of children when using the school canteen. The school … The President of the Personal Data Protection Office imposed a fine of PLN 20 000 in …
9 June 2021
… and of the thematic audit campaign on the role of the data protection officer (DPO). These decisions concern the adoption of … and of the thematic audit campaign on the role of the data protection officer (DPO). These decisions concern the …
3 September 2019
… and modalities for the exercise of the rights of the data subject) Article 13 (Information to be provided where personal data are collected from the data subject) Article 14 (Information to be provided where … and the link to a portal for en- quiries from data subjects are now also integrated as a contact option. …