Details:

Summary The Polish DPA has imposed a fine of EUR 11,100 on a housing cooperative. The controller had disclosed personal data of a member of the cooperative to an unauthorized person. The incident was recorded in an internal register of violations, however the controller failed to inform the DPA and the data subject of the incident in a timely manner.
Link: link link
Related articles:  Art. 33 (1) GDPR, Art. 34 (1) GDPR
Type: Insufficient fulfilment of data breach notification obligations
Fine: EUR 11,100
Sector Individuals and Private Associations

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law