Poland: UODO initiates proceedings against Fortum for data breach
The Polish data protection authority ('UODO') announced, on 18 May 2020, that it had initiated administrative proceedings against Fortum Marketing and Sales Polska S.A. regarding a data breach. In particular, the UODO stated that it had called on Fortum to provide information of the data breach including the categories of personal data involved. Furthermore, the UODO highlighted that information relating to technical and organisational measures adopted, as well as information on when such measures are tested, measured, and evaluated, is particularly important to a data breach investigation. In addition, the UODO directed Fortum to take action to immediately inform the data subjects about the violation of their personal data.
You can read the press release, only available in Polish, here.