The Polish data protection authority has fined a public authority 40,000 Euros for violations of GDPR including:
- failure to execute Article 28 data processing agreements with its service providers
- retaining personal data for longer than required by law
- storing official videos only on YouTube in violation of the obligation to ensure availability, integrity and continuity
Read the agency’s official statement on the fine.