🇪🇺 POLAND
121 decisions · €29.8M total fines · Polish National Personal Data Protection Office (UODO)
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2025-06-23 | Municipal Social Welfare Center Aleksandrów Insufficient technical and organisational measures to ensure information security | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 32 | €3,500 |
| 2025-06-23 | Municipal Social Welfare Center Aleksandrów Insufficient technical and organisational measures to ensure information security | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 32 | €3,500 |
| 2025-04-15 | Funeral Home Insufficient technical and organisational measures to ensure information security | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 5 | €7,800 |
| 2025-04-15 | Funeral Home Insufficient technical and organisational measures to ensure information security | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 5 | €7,800 |
| 2025-03-24 | Chief Commander of the Police Insufficient legal basis for data processing | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 6Art. 9 | €17,600 |
| 2025-03-17 | Poczta Polska SA (Polish Post) Insufficient legal basis for data processing | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 6 | €6,300,000 |
| 2025-03-17 | Minister of Digital Affairs Insufficient legal basis for data processing | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 5Art. 6 | €23,500 |
| 2025-03-11 | Polskie Radio Szczecin Insufficient technical and organisational measures to ensure information security | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 24Art. 32 | €13,400 |
| 2024-12-23 | Panek SA Insufficient technical and organisational measures to ensure information security | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 32 | €357,000 |
| 2024-12-18 | Company Insufficient technical and organisational measures to ensure information security | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 38Art. 30Art. 35 | €135,600 |
| 2024-11-26 | Hospital Insufficient fulfilment of data breach notification obligations | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 33Art. 34 | €6,900 |
| 2024-11-20 | POLAND DPA: Insufficient technical and organisational measures to ensure information security Insufficient technical and organisational measures to ensure information security | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 5Art. 25Art. 28Art. 32 | €358,000 |
| 2024-11-20 | POLAND DPA: Insufficient technical and organisational measures to ensure information security Insufficient technical and organisational measures to ensure information security | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 28Art. 32 | €4,700 |
| 2024-10-18 | POLAND DPA: Insufficient involvement of data protection officer Insufficient involvement of data protection officer | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 37 | €5,800 |
| 2024-09-02 | National Prosecutor's Office Insufficient legal basis for data processing | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 6Art. 9Art. 33Art. 34 | €19,800 |
| 2024-08-30 | POLAND DPA: Insufficient cooperation with supervisory authority Insufficient cooperation with supervisory authority | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 31Art. 58 | €4,500 |
| 2024-08-20 | mBank Insufficient fulfilment of data breach notification obligations | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 34 | €940,000 |
| 2024-07-10 | POLAND DPA: Insufficient cooperation with supervisory authority Insufficient cooperation with supervisory authority | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 31Art. 58 | €5,000 |
| 2024-06-13 | Healthcare facility Insufficient technical and organisational measures to ensure information security | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 24Art. 25Art. 32Art. 34 | €9,200 |
| 2024-05-20 | Company Insufficient technical and organisational measures to ensure information security | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 5Art. 32 | €336,000 |
| 2024-04-30 | Association Insufficient fulfilment of data breach notification obligations | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 33 | €210 |
| 2024-04-29 | Res-Gastro M. Gaweł Sp. k. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 24Art. 25Art. 32 | €56,000 |
| 2024-04-24 | Committee Insufficient technical and organisational measures to ensure information security | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 5Art. 25Art. 32 | €2,500 |
| 2024-03-12 | Santander Bank Polska S.A. Insufficient fulfilment of data breach notification obligations | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 33Art. 34 | €326,000 |
| 2024-03-12 | Toyota Bank Polska S.A. Insufficient fulfilment of data breach notification obligations | 🇪🇺 Polish National Personal Data Protection Office (UODO) | Art. 33 | €18,000 |