{"id":4976,"date":"2026-06-22T18:21:25","date_gmt":"2026-06-22T18:21:25","guid":{"rendered":"https:\/\/bizonews.com\/pl\/energa-obrot-reprimanded-by-uodo-over-whatsapp-data-breach\/"},"modified":"2026-06-22T18:21:34","modified_gmt":"2026-06-22T18:21:34","slug":"energa-obrot-reprimanded-by-uodo-over-whatsapp-data-breach","status":"publish","type":"post","link":"https:\/\/bizonews.com\/pl\/energa-obrot-reprimanded-by-uodo-over-whatsapp-data-breach\/","title":{"rendered":"Energa-Obr\u00f3t Reprimanded by UODO Over WhatsApp Data Breach"},"content":{"rendered":"<p>Poland\u2019s Personal Data Protection Office (UODO) has issued a formal reprimand to Energa-Obr\u00f3t after sales agents improperly processed customer contract scans and sensitive information via the WhatsApp messaging application.  <\/p>\n<h4>Regulatory Enforcement and Penalties<\/h4>\n<p>UODO President Miros\u0142aw Wr\u00f3blewski issued the reprimand following an investigation into data protection violations. In addition to the warning for Energa-Obr\u00f3t, a cooperating entity involved in the illicit processing was fined approximately 10,145 PLN.<\/p>\n<h4>Systemic Failures in Oversight<\/h4>\n<p>The investigation revealed that Energa-Obr\u00f3t, acting as the data administrator, failed to implement adequate technical and organizational security measures. The company also neglected to properly verify whether its contracted processors provided sufficient guarantees for secure data handling.<\/p>\n<h4>The 2021 WhatsApp Data Leak<\/h4>\n<p>The incident dates back to 2021, when business partners visited homes to propose contract amendments. The company self-reported the breach after discovering that a former sales representative and associates had used WhatsApp for months to transmit customer documents, including scans of contracts for at least 15 clients.<\/p>\n<h4>Unauthorized Processing and Accountability<\/h4>\n<p>The investigation confirmed that some data was transmitted outside the European Economic Area. While Energa-Obr\u00f3t self-reported the internal findings, the external processor attempted to minimize its role and shift responsibility to other parties during the UODO proceedings.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Poland\u2019s Personal Data Protection Office (UODO) has issued a formal reprimand to Energa-Obr\u00f3t after sales agents improperly processed customer contract scans and sensitive information via the WhatsApp messaging application. Regulatory Enforcement and Penalties UODO President Miros\u0142aw Wr\u00f3blewski issued the reprimand following an investigation into data protection violations. In addition to the warning for Energa-Obr\u00f3t, a [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"wpai_generated_summary":"","footnotes":""},"categories":[43],"tags":[],"class_list":["post-4976","post","type-post","status-publish","format-standard","hentry","category-politics-and-law"],"_links":{"self":[{"href":"https:\/\/bizonews.com\/pl\/wp-json\/wp\/v2\/posts\/4976","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bizonews.com\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bizonews.com\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bizonews.com\/pl\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/bizonews.com\/pl\/wp-json\/wp\/v2\/comments?post=4976"}],"version-history":[{"count":0,"href":"https:\/\/bizonews.com\/pl\/wp-json\/wp\/v2\/posts\/4976\/revisions"}],"wp:attachment":[{"href":"https:\/\/bizonews.com\/pl\/wp-json\/wp\/v2\/media?parent=4976"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bizonews.com\/pl\/wp-json\/wp\/v2\/categories?post=4976"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bizonews.com\/pl\/wp-json\/wp\/v2\/tags?post=4976"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}