PUODO

PUODO Fines Poznań Logistics University PLN 64,652 for Inadequate GDPR Risk Analysis

The Polish data protection authority PUODO has imposed a fine of 64,652 zł on Wyższa Szkoła Logistyki w Poznaniu for failing to conduct proper risk assessments and implement sufficient technical and organizational measures under GDPR. The violation came to light after a staff member accidentally shared a file containing personal data of 964 students via the university's online deanery platform. The file was accessed by 125 out of 388 authorized users and downloaded 361 times. PUODO found that the university's risk analysis ignored risks such as accidental data disclosure, even after the incident occurred. The authority also referenced a prior high-profile case involving ING Bank Śląski, which received an 18.4 million zł fine later upheld by the courts. The university was ordered to update its processing operations to minimize data protection risks. President Mirosław Wróblewski emphasized the need for accountability and confidentiality in handling student records.