Skip to content

🇪🇺 Polish National Personal Data Protection Office (UODO)

126 decisions · €33.7M total fines · POLAND →

Date ↓ Company / party Authority Articles Fine
2021-06-21 Sopockie Towarzystwo Ubezpieczeń ERGO Hestia S.A.
Insufficient fulfilment of data breach notification obligations
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 33Art. 34 €35,300
2021-04-27 PNP S.A.
Insufficient cooperation with supervisory authority
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 31Art. 58 €5,050
2021-03-19 Funeda Sp. z o.o.
Insufficient cooperation with supervisory authority
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 31Art. 58 €4,900
2021-02-11 Krajowa Szkoła Sądownictwa i Prokuratury
Insufficient technical and organisational measures to ensure information security
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 5Art. 25Art. 28Art. 32 €22,200
2021-01-15 Anwara Sp. z.o.o.
Insufficient cooperation with supervisory authority
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 31Art. 58 €4,600
2021-01-11 Enea S.A.
Insufficient fulfilment of data breach notification obligations
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 33 €30,000
2021-01-05 POLAND DPA: Insufficient fulfilment of data breach notification obligations
Insufficient fulfilment of data breach notification obligations
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 34Art. 58 €19,000
2021-01-05 Śląski Uniwersytet Medyczny (Medical University of Silesia)
Insufficient fulfilment of data breach notification obligations
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 33Art. 34 €5,500
2020-12-28 Towarzystwo Ubezpieczeń i Reasekuracji WARTA S.A.
Insufficient fulfilment of data breach notification obligations
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 33Art. 34 €18,930
2020-12-17 ID Finance Poland Sp. z o.o.
Insufficient technical and organisational measures to ensure information security
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 5Art. 25Art. 32 €235,300
2020-12-14 Virgin Mobile Polska
Insufficient technical and organisational measures to ensure information security
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 5Art. 25Art. 32 €443,000
2020-12-09 TUiR Warta S.A.
Insufficient fulfilment of data breach notification obligations
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 33Art. 34 €18,850
2020-12-09 Smart Cities Sp. z o.o.
Insufficient cooperation with supervisory authority
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 31Art. 58 €2,850
2020-09-08 Warsaw University of Life Sciences
Insufficient technical and organisational measures to ensure information security
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 32 €11,200
2020-08-31 Surveyor General of Poland ('GKK')
Insufficient legal basis for data processing
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 5Art. 6 €22,700
2020-07-15 Office for geodesy and cartography
Insufficient cooperation with supervisory authority
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 31Art. 58 €22,300
2020-07-10 East Power Sp. z o.o.
Insufficient cooperation with supervisory authority
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 31Art. 58 €3,400
2020-06-03 Entrepreneur running a non-public nursery and pre-school
Insufficient cooperation with supervisory authority
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 31Art. 58 €1,168
2020-03-09 Vis Consulting Sp. z o.o.
Insufficient cooperation with supervisory authority
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 31Art. 58 €4,400
2020-03-04 School in Gdansk (Danzig) (fine imposed against town of Gdansk)
Insufficient legal basis for data processing
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 5Art. 9 €0
2019-11-01 L. Sp. z o.o.
Non-compliance with general data processing principles
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 5 €1,770
2019-10-18 Major of Aleksandrów Kujawski
Insufficient data processing agreement
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 28 €9,380
2019-10-16 ClickQuickNow
Non-compliance with general data processing principles
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 5 €47,000
2019-09-10 Morele.net
Insufficient technical and organisational measures to ensure information security
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 32 €660,000
2019-04-25 Sports association
Insufficient legal basis for data processing
🇪🇺 Polish National Personal Data Protection Office (UODO) Art. 6 €12,950