Back to Cases
technologytelecoms · 2024
Orange Polska S.A.
UODO fined Orange Polska after weaknesses in customer authentication and rights-handling processes exposed subscriber data, implicating GDPR Articles 12, 15 and 32.
Fine Imposed€520,000.0
Regulation
Key Takeaways
- Rights-request workflows must be secure enough to avoid becoming disclosure vectors.