PLPolish Data Protection Authority04 April 2025Failure to notify data breach
Unnamed bank
Unnamed bank: Polish DPA, EUR 928,498.06, failure to inform customers of a data breach.
EUR€928,000
Summary
The Polish data protection authority imposed a fine of EUR 928,498.06 on a bank. The authority found that the bank failed to inform customers about a personal data breach. The case concerns post-incident notification obligations.
Grounds for the decision
Failure to notify customers of a personal data breach.