14 March 2023
… fines controller EUR 4500 for failure to notify a personal data breach 14 March 2023 Poland Background information Date of … Legal references: Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 … Legal references: Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 …
10 December 2020
… Dutch SA fines Booking.com for delay in reporting data breach 10 December 2020 Netherlands Belgium France Sweden … Booking.com Legal Reference: Notification personal data breach to supervisory authority, article 33 (1) … Booking.com Legal Reference: Notification personal data breach to supervisory authority, article 33 (1) …
21 March 2019
… Hungarian SA investigation regarding data breach of the Democratic Coalition (DK) 21 March 2019 … the NAIH was informed by a Hungarian citizen, that the database containing personal data of the party’s supporters … the NAIH was informed by a Hungarian citizen, that the database containing personal data of the party’s supporters …
10 March 2020
… Personal data breach at the National Center of Addiction Medicine – … of Addiction Medicine in a case relating to a personal data breach. The National Center of Addiction Medicine is an NGO … of Addiction Medicine in a case relating to a personal data breach. The National Center of Addiction Medicine is an …
4 May 2022
… Health data breach: Dedalus Biologie fined 1.5 million euros 4 May 2022 … 28 GDPR) Decision: Administrative fine Key words: Health data breach Summary of the Decision Origin of the case On … 28 GDPR) Decision: Administrative fine Key words: Health data breach Summary of the Decision Origin of the case On …
10 June 2022
… Data breach: the Italian SA fines INAIL EUR 50,000 10 June 2022 … letter g) (lawfulness of processing also regarding health data); Art. 32 (security); Art. 33 (personal data breach). Italian DP Code: sections 2-b and 2-f (lawfulness … letter g) (lawfulness of processing also regarding health data); Art. 32 (security); Art. 33 (personal data breach). …
11 January 2021
… Polish DPA Fines ENEA S.A.: A data breach must be notified to the supervisory authority 11 … 000) on ENEA S.A. company for failing to notify a personal data breach. The Personal Data Protection Office (UODO) … 000) on ENEA S.A. company for failing to notify a personal data breach. The Personal Data Protection Office (UODO) …
3 February 2022
… imposed to telecommunications companies due to personal data breach and illegal data processing 3 February 2022 Greece Background … and modalities for the exercise of the rights of the data subject (Article 12), Information to be provided where … of the GDPR, Fines imposed Key words: GDPR, Data breach, Security, Data protection impact assessment, …
30 April 2025
… Imposition of a fine on a bank for an incident of personal data breach 30 April 2025 Greece Background information Date of … and Confidentiality), Article 15 (Right of access by the data subject), Article 25.1 (Data protection by design and … and Confidentiality), Article 15 (Right of access by the data subject), Article 25.1 (Data protection by design and …
3 January 2023
… fine on telecom operator for failure to notify the personal data breach 3 January 2023 Poland Background information Date of … company to provide information on the said personal data breach, and to provide an assessment in terms of the … company to provide information on the said personal data breach, and to provide an assessment in terms of the …
7 June 2019
… must receive specific, helpful information in case of a data breach 7 June 2019 Italy The information provided should … risks they may run and how they can protect their personal data. No generic information may be provided to users in … risks they may run and how they can protect their personal data. No generic information may be provided to users in …
20 January 2023
… SA has once again investigated Virgin Mobile's personal data breach 20 January 2023 Poland Background information Date of … Article 5(1)(f), Accountability Article 5(2), Data protection by design and by default Article 25(1), … Article 5(1)(f), Accountability Article 5(2), Data protection by design and by default Article 25(1), …
18 January 2024
… One-Stop-Shop case digest on Security of Processing and Data Breach Notification 18 January 2024 Support Pool of Experts … Since the entry into force of the GDPR, data protection authorities (DPAs) have closely cooperated … number of one-stop-shop decisions on data security and data breaches. The one-stop-shop case digest on security of …
18 January 2024
… EDPB publishes OSS case digest on Security of Processing and Data Breach Notification 18 January 2024 EDPB The EDPB has … case digest on Security of Processing (Art. 32 GDPR) and Data Breach Notification (Art. 33 & 34 GDPR) . Since the … case digest on Security of Processing (Art. 32 GDPR) and Data Breach Notification (Art. 33 & 34 GDPR) . Since the …
13 January 2021
… Polish DPA & WARTA: Failure to notify a personal data breach without undue delay as a reason for imposing a fine … Company) infringed the provisions of the General Data Protection Regulation, because it did not notify a … Company) infringed the provisions of the General Data Protection Regulation, because it did not notify a …
6 February 2025
… fine of 6 800 € for failure to notify a personal data breach to the supervisory authority 6 February 2025 Poland … Legal Reference (s): Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 … Legal Reference (s): Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 …
1 March 2023
… fine for housing association for lack of personal data breach notification to the Polish SA 1 March 2023 Poland … (i) GDPR, Article 33 (1) GDPR (Notification of a personal data breach to the supervisory authority), Article 34 (1), … (i) GDPR, Article 33 (1) GDPR (Notification of a personal data breach to the supervisory authority), Article 34 (1), …
22 November 2021
… Polish DPA: Bank Millennium fined for failure to notify the breach and the data subjects about the incident 22 November 2021 Poland … S.A. Legal Reference: Notification of a personal data breach to the supervisory authority (Article 33(1)), … S.A. Legal Reference: Notification of a personal data breach to the supervisory authority (Article 33(1)), …
14 March 2024
… fine of € 24.000 for failure to notify a personal data breach 14 March 2024 Poland Background information Date of … October 2023 National case Legal Reference(s): Article 35 (Data protection impact assessment), Article 83 (General … October 2023 National case Legal Reference(s): Article 35 (Data protection impact assessment), Article 83 (General …
6 February 2025
… administrative fine of 928 498,06 € for failure to inform data breach victims 6 February 2025 Poland Background information … Reference (s): Article 34 (Communication of a personal data breach to the data subject) Decision: Administrative … Reference (s): Article 34 (Communication of a personal data breach to the data subject) Decision: Administrative …