Legal fallout continues for Santander Bank Polska's 2018 documents case
The President of Poland’s Personal Data Protection Office (UODO) is appealing a court ruling that partially overturned a fine against Santander Bank Polska for a major data breach. In 2018, documents containing sensitive client data were stolen and later found in a dumpster. The bank neither reported the incident to UODO nor informed affected clients. UODO imposed a PLN 1.44 million fine, but the administrative court (WSA) ruled the penalty was time-barred.
UODO disagrees, arguing that EU GDPR law sets no statute of limitations for such penalties and has filed a cassation appeal with the Supreme Administrative Court. UODO is also seeking guidance from the EU Court of Justice, citing the case’s precedent-setting importance.
(wnp.pl)