The Polish data protection authority UODO imposed a fine of PLN 7,700 on the Mayor of the City and Municipality of Myślenice following a complaint by an affected individual. The mayor had published a petition containing non-anonymised personal data of 749 signatories in the public information bulletin. The file remained accessible for several weeks. The violation concerned the failure to report the data breach to the supervisory authority as required by Art. 33 GDPR – despite being prompted by the authority, no notification was made prior to the decision.