UODO (Poland) - DKE.561.3.2026
Poland's DPA fines company €6,700 for failing to comply with GDPR information obligations.
Poland's Data Protection Authority (UODO) has fined a limited liability company PLN 29,112 (€6,700) for failing to comply with a previous decision. The company was ordered to fulfill its information obligations under Article 14 of the GDPR, but did not respond to multiple communications from the DPA. The authority considered the violation to be of significant gravity, as the data subject remained uncertain about the processing of their personal data and the exercise of their rights.
AI summary of the linked source. Not reviewed by an editor. How this works
Run UODO?
Get an email when a new story names UODO, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonA Polish company was fined for failing to fulfill its Article 14 GDPR obligations — which require organizations to inform individuals about how their personal data is processed when collected indirectly — even after the data protection authority issued a formal order. Compounding the violation, the company failed to respond to multiple communications from the regulator, demonstrating a systemic breakdown in compliance governance. This left the affected data subject unable to understand or exercise their privacy rights, which is precisely the harm GDPR transparency requirements are designed to prevent. Ignoring a DPA decision is treated as a serious aggravating factor and exposes organizations to escalating fines and enforcement actions. This case underscores that non-response to regulators is never a viable strategy and carries significant legal and reputational risk.