Polish SA: administrative fine of € 24.000 for failure to notify a personal data breach

Summary:

On January 18, 2024, the European Data Protection Board (EDPB) published a One-Stop-Shop case digest on Security of Processing and Data Breach Notification. The digest provides a summary of relevant case law and practices surrounding the security of processing of personal data and data breach notification requirements under the General Data Protection Regulation (GDPR). The document is divided into two parts: the case digest and an annex. The case digest summarizes 11 cases that addressed issues related to data security and breach notification, while the annex provides additional information and practice notes on these topics. The digest aims to provide guidance to data controllers and processors on their obligations under the GDPR and promote consistency in data protection practices across the EU.

Please note that the document is in the form of a downloadable file (977.1KB) and an annex file (392.6KB). If you wish to access the full content, you may need to download or refer to the original document.