WSA Warsaw (Poland) - II SA/Wa 2227/19: Difference between revisions
(Created page with "{{COURTdecisionBOX |Jurisdiction=Poland |Court-BG-Color= |Courtlogo=Courts_logo1.png |Court_Abbrevation=WSA Warsaw (Poland) |Court_With_Country=WSA Warsaw (Poland) (Poland)...") |
No edit summary |
||
| Line 50: | Line 50: | ||
}} | }} | ||
The | The provincial administrative court decided that the public disclosure of the name and the content of the employment termination notice do not constitute disclosure within the meaning of the GDPR. | ||
== English Summary == | ==English Summary== | ||
=== Facts === | ===Facts=== | ||
The data subject's complaint concerned irregularities in the process of processing of his personal data by the company. They consisted in making his personal data available to unauthorised persons. It was alleged that the company's employees - in the presence of third parties located in the MP's office (public place) - read, using the applicant's personal data, the content of the statement on termination of the employment contract. The applicant indicated that - after refusing to accept the termination - representatives of the company left an unsecured letter containing the termination in the presence of persons in the MP's office; therefore, the applicant requested that all actions be taken to rectify the violations indicated. | The data subject's complaint concerned irregularities in the process of processing of his personal data by the company. They consisted in making his personal data available to unauthorised persons. It was alleged that the company's employees - in the presence of third parties located in the MP's office (public place) - read, using the applicant's personal data, the content of the statement on termination of the employment contract. The applicant indicated that - after refusing to accept the termination - representatives of the company left an unsecured letter containing the termination in the presence of persons in the MP's office; therefore, the applicant requested that all actions be taken to rectify the violations indicated. | ||
President of the Personal Data Protection Office has decided that the provision of personal data to the applicant in the above mentioned way was done in violation of the provisions of personal data protection Article 5 (1) (c) and (f) of the GDPR. | President of the Personal Data Protection Office has decided that the provision of personal data to the applicant in the above mentioned way was done in violation of the provisions of personal data protection Article 5 (1) (c) and (f) of the GDPR. | ||
| Line 60: | Line 60: | ||
=== Dispute === | ===Dispute=== | ||
The court considered whether the Polish DPA correctly applied Article 5(1)(c) and (f) of the GDPR and whether the GDPR provisions would be applied at all in the given situation. | |||
=== Holding === | ===Holding=== | ||
The Provincial Administrative Court for Warsaw revoked the decision of the President of the Personal Data Protection Office. | The Provincial Administrative Court for Warsaw revoked the decision of the President of the Personal Data Protection Office. | ||
In its reasoning, the Court states that Article 2 (1) of the GDPR shall apply only "to the processing of personal data wholly or partly by automatic means and to the processing, other than by automatic means, of personal data which form part of a filing system or are intended to form part of a filing system". | In its reasoning, the Court states that Article 2 (1) of the GDPR shall apply only "to the processing of personal data wholly or partly by automatic means and to the processing, other than by automatic means, of personal data which form part of a filing system or are intended to form part of a filing system". | ||
| Line 71: | Line 71: | ||
==Comment== | |||
== Comment == | |||
''Share your comments here!'' | ''Share your comments here!'' | ||
== Further Resources == | ==Further Resources== | ||
''Share blogs or news articles here!'' | ''Share blogs or news articles here!'' | ||
== English Machine Translation of the Decision == | ==English Machine Translation of the Decision== | ||
The decision below is a machine translation of the Polish original. Please refer to the Polish original for more details. | The decision below is a machine translation of the Polish original. Please refer to the Polish original for more details. | ||
Revision as of 08:39, 3 November 2020
| WSA Warsaw (Poland) - II SA/Wa 2227/19 | |
|---|---|
 | |
| Court: | WSA Warsaw (Poland) (Poland) |
| Jurisdiction: | Poland |
| Relevant Law: | Article 2(1) GDPR Article 4(6) GDPR |
| Decided: | 15.09.2020 |
| Published: | |
| Parties: | |
| National Case Number/Name: | II SA/Wa 2227/19 |
| European Case Law Identifier: | |
| Appeal from: | President of the Personal Data Protection Office |
| Appeal to: | Unknown |
| Original Language(s): | Polish |
| Original Source: | Centralna Baza Orzeczeń Sądów Administracyjnych (in Polish) |
| Initial Contributor: | n/a |
The provincial administrative court decided that the public disclosure of the name and the content of the employment termination notice do not constitute disclosure within the meaning of the GDPR.
English Summary
Facts
The data subject's complaint concerned irregularities in the process of processing of his personal data by the company. They consisted in making his personal data available to unauthorised persons. It was alleged that the company's employees - in the presence of third parties located in the MP's office (public place) - read, using the applicant's personal data, the content of the statement on termination of the employment contract. The applicant indicated that - after refusing to accept the termination - representatives of the company left an unsecured letter containing the termination in the presence of persons in the MP's office; therefore, the applicant requested that all actions be taken to rectify the violations indicated. President of the Personal Data Protection Office has decided that the provision of personal data to the applicant in the above mentioned way was done in violation of the provisions of personal data protection Article 5 (1) (c) and (f) of the GDPR. Both parties filed a complaint against the President of the Personal Data Protection Office decision with the Provincial Administrative Court for Warsaw.
Dispute
The court considered whether the Polish DPA correctly applied Article 5(1)(c) and (f) of the GDPR and whether the GDPR provisions would be applied at all in the given situation.
Holding
The Provincial Administrative Court for Warsaw revoked the decision of the President of the Personal Data Protection Office. In its reasoning, the Court states that Article 2 (1) of the GDPR shall apply only "to the processing of personal data wholly or partly by automatic means and to the processing, other than by automatic means, of personal data which form part of a filing system or are intended to form part of a filing system". The Court stressed that under Article 4(6) of the GDPR, a data filing system is a structured set of personal data accessible according to specific criteria, whether that set is centralised, decentralised or dispersed on a functional or geographical basis. Thus, the court did not consider the name and surname and information contained in the notice of termination of the employment contract as a filing system within the meaning of the GDPR. The court therefore found that the provisions of the GDPR did not apply in the factual situation examined by it. When reconsidering the case, the administrative authority will take into account the legal assessment formulated in the justification of the Provincial Administrative Court for Warsaw.
Comment
Share your comments here!
Further Resources
Share blogs or news articles here!
English Machine Translation of the Decision
The decision below is a machine translation of the Polish original. Please refer to the Polish original for more details.
