The Supreme Administrative Court held that a damaged mail item does not prove a breach
In its judgment of 25 August 2026, the Supreme Administrative Court (NSA), the full text of which is available in our Judykatura database, upheld the annulment of a reprimand issued to a bank by the President of the Personal Data Protection Office. The ruling confirms that a personal data breach does not relieve the authority of its obligation to demonstrate precisely how the controller failed to comply with its duties.
The rest of this analysis, all theses and the full text of the ruling are available with an AKTUALNOŚCI PLUS subscription.
Find out how EU supervisory authorities, administrative and civil courts and the CJEU reason their decisions — and keep your organisation aligned with current case law.