News · GDPRhub EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

UODO (Poland) - DKE.561.1.2026

Lawful Basis Competent Authorities Designation and Powers under DSA Processing Supervisory Authorities Supervision Personal Data Controllers
Aug 18, 2026 Source

How it connects

Related across sources

Enforcement AEPD (Spain) - PS/00249/2025 AEPD (Spain) Enforcement NAIH fines online store HUF 2M for unclear and incomplete privacy notice NAIH (Hungary) Enforcement Italian DPA sanctions Lusha Systems for processing contact data without consent in B2B Garante per la protezione dei dati personali (Italy) Guidance Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) EDPB Guidance Guidelines 04/2022 on the calculation of administrative fines under the GDPR EDPB Guidance Guidelines 05/2022 on the use of facial recognition technology in the area of law enforcement EDPB

Full text

The DPA reprimanded a company for refusing to cooperate with the supervisory authority: the controller had failed to provide information on the processing of personal data in two pending cases against it. English Summary. Facts. The DPA received two complaints against the same company (the controller) due to the unauthorised access to the data subjects’ personal data. The first complaint concerned processing that had taken place in January 2025, while the events giving rise to the second complaint had occurred in May 2025. During the proceedings initiated following the second complaint, the DPA requested certain information related to the processing operations at issue from the controller by sending the controller two letters in July and August respectively. The request included information on the scope of personal data processed, the sources from which the data were obtained, the legal basis and the purposes of processing. The controller never collected the first letter from the post

Original document at the source gdprhub.eu

Similar Content