Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

Poland: UODO announces its intention to investigate a personal data leak from the Sanitary Epidemiological Station

On May 6, 2024, the Polish data protection authority (UODO) announced that it would address the leak of the personal data of a social activist in 2020 from the Sanitary Epidemiological Station, thereby withdrawing an earlier cassation appeal by the UODO. In particular, the UODO reminded that the case involved the disclosure of the data subject's positive COVID test result and a doctor's statement by the TVP Info.

The UODO's President noted that his predecessor was unable to investigate the disclosure of medical data due to a lack of consent from the data subject. However, the UODO has now been able to contact the data subject to enable them to provide such consent. Furthermore, the UODO emphasized that although the UODO cannot investigate journalistic activities under the General Data Protection Regulation (GDPR), it would need to investigate data leaks from public registers and assess the legality of data transfer to journalists by data controllers, including examining the Sanitary Epidemiological Station's IT system for data processing accuracy.

You can read the press release, only available in Polish, here.

Feedback