Poland: Issued UODO ruling in investigation into Link4 regarding failure to report a data breach

On 23 November 2023, the Polish Personal Data Protection Office (UODO) announced it fined the insurance company Link4 for failure to report a data breach. The company sent a damage compensation message to an unauthorised recipient, containing various personal data. The company was informed by the unauthorised recipient about the event but did not take any action. Later, the company explained that the message was sent as a result of human error. The fine amounts to PLN 103'752.