UODO (Poland) - DKE.561.3.2026
Poland's UODO fines company PLN 29,112 for failing to comply with data protection information obligations.
Poland's Personal Data Protection Office (UODO) has fined a limited liability company PLN 29,112 (approximately €6,700) for failing to comply with a previous decision. The company was ordered to fulfill its information obligations under GDPR Articles 14(1) and 14(2) but repeatedly failed to respond to UODO's communications, including letters and requests for financial statements. The violation persisted for nearly a year, impacting one data subject.
AI summary of the linked source. Not reviewed by an editor. How this works
Run UODO?
Get an email when a new story names UODO, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonA Polish company was fined nearly €6,700 after failing to fulfill its GDPR Article 14 obligations to inform data subjects about how their personal data is processed, and then compounding the violation by repeatedly ignoring communications from the supervisory authority (UODO) for nearly a year. GDPR Article 14 requires organizations to proactively provide transparency information to individuals whose data was obtained from third parties — a duty that cannot simply be overlooked. The refusal or inability to engage with regulatory correspondence suggests a fundamental lack of internal accountability and GDPR governance. This case illustrates that non-compliance penalties can compound when organizations fail to respond to enforcement actions, turning a manageable compliance gap into a sustained regulatory violation.