[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fU1U39h0rb9xdTJCiRD97ANN66ZfH-hePsVfkqYk5dOw":3},{"article":4,"iocs":43,"watch_terms":44,"solutions":45,"lesson":48},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"c612ef91-cc50-4047-8d9d-9578b132ad07","UODO (Poland) - DKE.561.3.2026","uodo-poland-dke-561-3-2026-3c9c82","← Older revision Revision as of 06:48, 7 October 2026 Line 88: Line 88: }} }} The DPA fined a limited liability company PLN 29,112 (€6,700) for a failure to comply with a decision ordering the controller to fulfil its information obligations under [[Article 14 GDPR|Articles 14(1)]] and [[Article 14 GDPR|14(2) GDPR]]. The DPA fined a controller PLN 29,112 (€6,700) for a failure to comply with its previous decision ordering the controller to fulfil its information obligations under Article 14 GDPR. When determining the amount of the fine, the DPA took into account that the affected data subject remained in a state of uncertainty. == English Summary == == English Summary ==","Poland's Data Protection Authority (UODO) has fined a limited liability company PLN 29,112 (€6,700) for failing to comply with a previous decision. The company was ordered to fulfill its information obligations under Article 14 of the GDPR, but did not respond to multiple communications from the DPA. The authority considered the violation to be of significant gravity, as the data subject remained uncertain about the processing of their personal data and the exercise of their rights.","Poland's DPA fines company €6,700 for failing to comply with GDPR information obligations.","https:\u002F\u002Fgdprhub.eu\u002Findex.php?title=UODO_(Poland)_-_DKE.561.3.2026&diff=53322&oldid=53302","https:\u002F\u002Fgdprhub.eu\u002Fimages\u002F7\u002F7b\u002FLogoPL.png","2026-10-07T06:48:05+00:00","2026-10-07T08:00:26.457889+00:00",7,[17],{"name":18,"type":19},"UODO","vendor","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":20,"icon":22,"name":23,"slug":24},null,"Policy","policy",[26,31,36,38],{"category":27},{"id":28,"icon":22,"name":29,"slug":30},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","GDPR","gdpr",{"category":32},{"id":33,"icon":22,"name":34,"slug":35},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":37},{"id":20,"icon":22,"name":23,"slug":24},{"category":39},{"id":40,"icon":22,"name":41,"slug":42},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",[],[18],{"controls":46,"vendors":47},[],[],{"slug":49,"title":50,"body":51,"framework_refs":52,"framework_notes":61},"polish-dpa-fines-company-for-ignoring-gdpr-information-obligations-and-regulator-communications","Polish DPA Fines Company for Ignoring GDPR Information Obligations and Regulator Communications","A Polish company was fined for failing to fulfill its Article 14 GDPR obligations — which require organizations to inform individuals about how their personal data is processed when collected indirectly — even after the data protection authority issued a formal order. Compounding the violation, the company failed to respond to multiple communications from the regulator, demonstrating a systemic breakdown in compliance governance. This left the affected data subject unable to understand or exercise their privacy rights, which is precisely the harm GDPR transparency requirements are designed to prevent. Ignoring a DPA decision is treated as a serious aggravating factor and exposes organizations to escalating fines and enforcement actions. This case underscores that non-response to regulators is never a viable strategy and carries significant legal and reputational risk.",[53,54,55,56,57,58,59,60],"GDPR Article 14 (Information to be provided where personal data have not been obtained from the data subject)","GDPR Article 58 (Powers of supervisory authorities)","GDPR Article 83 (General conditions for imposing administrative fines)","NIST SP 800-53 PT-2 (Authority to Process Personally Identifiable Information)","NIST SP 800-53 IR-6 (Incident Reporting)","CIS Control 17 (Incident Response Management)","ISO\u002FIEC 27701:2019 Section 7.3.2 (Obligations to PII Principals)","ITIL Service Management — Compliance and Regulatory Management practice",{}]