"Since the application of the EU General Data Protection Regulation, the Polish President of the Office for Personal Data Protection has already imposed five administrative financial penalties for noncompliance with personal data protection rules that mainly related to infringement concerning the security and confidentiality of personal data," Spaczynski, Szczepaniak i Wspolnicy Partner Joanna Tomaszewska writes. "There has been enforcement action taken against both the public and the private sector, though it's worth noting four of the five enforcement actions have been against the private sector." In this piece for The Privacy Advisor, Tomaszewska breaks down the GDPR penalties and looks at what organizations can do to avoid fines of their own.
Full Story