[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYdDz3dnJVMjXKI2mbMK-kPJWxWOSD18nPmtGYKf1ZzE":3},{"article":4,"iocs":43,"watch_terms":44,"solutions":45,"lesson":48},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"950ee467-cb49-4237-8083-3e7c006eca7d","UODO (Poland) - DKE.561.3.2026","uodo-poland-dke-561-3-2026-4d2181","Created page with \"{{DPAdecisionBOX |Jurisdiction=Poland |DPA-BG-Color= |DPAlogo=LogoPL.png |DPA_Abbrevation=UODO |DPA_With_Country=UODO (Poland) |Case_Number_Name=DKE.561.3.2026 |ECLI= |Original_Source_Name_1=UODO |Original_Source_Link_1=https:\u002F\u002Forzeczenia.uodo.gov.pl\u002Fdocument\u002Furn:ndoc:gov:pl:uodo:2026:dke_561_3\u002Fcontent?query= |Original_Source_Language_1=Polish |Original_Source_Language__Code_1=PL |Original_Source_Name_2= |Original_Source_Link_2= |Original_Source_Language_2= |Origin...\" Show changes","Poland's Personal Data Protection Office (UODO) has fined a limited liability company PLN 29,112 (approximately €6,700) for failing to comply with a previous decision. The company was ordered to fulfill its information obligations under GDPR Articles 14(1) and 14(2) but repeatedly failed to respond to UODO's communications, including letters and requests for financial statements. The violation persisted for nearly a year, impacting one data subject.","Poland's UODO fines company PLN 29,112 for failing to comply with data protection information obligations.","https:\u002F\u002Fgdprhub.eu\u002Findex.php?title=UODO_(Poland)_-_DKE.561.3.2026&diff=53297&oldid=0","https:\u002F\u002Fgdprhub.eu\u002Fimages\u002F7\u002F7b\u002FLogoPL.png","2026-10-06T13:00:38+00:00","2026-10-06T14:00:22.945857+00:00",7,[17],{"name":18,"type":19},"UODO","vendor","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":20,"icon":22,"name":23,"slug":24},null,"Policy","policy",[26,31,36,38],{"category":27},{"id":28,"icon":22,"name":29,"slug":30},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","GDPR","gdpr",{"category":32},{"id":33,"icon":22,"name":34,"slug":35},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":37},{"id":20,"icon":22,"name":23,"slug":24},{"category":39},{"id":40,"icon":22,"name":41,"slug":42},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",[],[18],{"controls":46,"vendors":47},[],[],{"slug":49,"title":50,"body":51,"framework_refs":52,"framework_notes":62},"polish-company-fined-for-ignoring-gdpr-information-obligations-and-regulator-communications","Polish Company Fined for Ignoring GDPR Information Obligations and Regulator Communications","A Polish company was fined nearly €6,700 after failing to fulfill its GDPR Article 14 obligations to inform data subjects about how their personal data is processed, and then compounding the violation by repeatedly ignoring communications from the supervisory authority (UODO) for nearly a year. GDPR Article 14 requires organizations to proactively provide transparency information to individuals whose data was obtained from third parties — a duty that cannot simply be overlooked. The refusal or inability to engage with regulatory correspondence suggests a fundamental lack of internal accountability and GDPR governance. This case illustrates that non-compliance penalties can compound when organizations fail to respond to enforcement actions, turning a manageable compliance gap into a sustained regulatory violation.",[53,54,55,56,57,58,59,60,61],"GDPR Article 14(1) – Information to be provided where personal data have not been obtained from the data subject","GDPR Article 14(2) – Additional information obligations for third-party sourced data","GDPR Article 58(2)(c) – Supervisory authority power to issue reprimands and orders","GDPR Article 83(1) – General conditions for imposing administrative fines","NIST SP 800-53 PT-2 (Authority to Process Personally Identifiable Information)","NIST SP 800-53 IR-6 (Incident Reporting)","CIS Control 17 – Incident Response Management","ISO\u002FIEC 27701:2019 – Privacy Information Management System (PIMS)","ITIL Service Management – Compliance and Regulatory Obligation Management",{}]