ALT TEXT: New decision from Poland: During the process of initiating a controller’s new website personal data of 21.453 individuals were disclosed. The DPA fined the controller 1.527.855 and a processor PLN 20.037 for violations of principle of data security and [[Article 32 GDPR|Article 32 GDPR]].