President of the Personal Data Protection Office imposes PLN 64,652 fine on university for flawed risk assessment
The full text of the decision in the Judykatura database shows why risk assessment documentation alone is insufficient to demonstrate GDPR compliance. The President of the Personal Data Protection Office found that a risk assessment must cover real threats arising from the specific means of processing.
The rest of this analysis, all theses and the full text of the ruling are available with an AKTUALNOŚCI PLUS subscription.
Find out how EU supervisory authorities, administrative and civil courts and the CJEU reason their decisions — and keep your organisation aligned with current case law.