[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fB6fmpra2iXcprTa-IQaJwAYwwUMIS7b9tDlx7ngxF70":3},{"article":4,"iocs":43,"watch_terms":44,"solutions":45,"lesson":48},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"06b702f3-3184-47ad-aa3c-25943c6f3d95","UODO (Poland) - DKE.561.4.2026","uodo-poland-dke-561-4-2026-c25556","Created page with \"{{DPAdecisionBOX |Jurisdiction=Poland |DPA-BG-Color=background-color:#ffffff; |DPAlogo=LogoPL.png |DPA_Abbrevation=UODO |DPA_With_Country=UODO (Poland) |Case_Number_Name=DKE.561.4.2026 |ECLI= |Original_Source_Name_1=UODO |Original_Source_Link_1=https:\u002F\u002Forzeczenia.uodo.gov.pl\u002Fdocument\u002Furn:ndoc:gov:pl:uodo:2026:dke_561_4\u002Fcontent?query |Original_Source_Language_1=Polish |Original_Source_Language__Code_1=PL |Original_Source_Name_2= |Original_Source_Link_2= |Original_Sourc...\" Show changes","Poland's Office for Personal Data Protection (UODO) has fined an individual PLN 26,711 (approximately €6,174) for violating GDPR. The individual continued unlawful camera surveillance beyond their property, including public roads and neighbors' properties, despite an earlier decision ordering them to cease and remove the cameras. The UODO found the controller failed to demonstrate compliance and that the surveillance interfered with the community's functioning and potentially aimed to harass data subjects.","Poland's UODO fines individual PLN 26,711 for unlawful camera surveillance.","https:\u002F\u002Fgdprhub.eu\u002Findex.php?title=UODO_(Poland)_-_DKE.561.4.2026&diff=52207&oldid=0","https:\u002F\u002Fgdprhub.eu\u002Fimages\u002F7\u002F7b\u002FLogoPL.png","2026-07-14T08:56:32+00:00","2026-07-14T10:00:13.567324+00:00",7,[17],{"name":18,"type":19},"UODO","vendor","d95477d7-eb04-4fad-a2dc-be1428040ce7",{"id":20,"icon":22,"name":23,"slug":24},null,"Privacy Fines","privacy-fines",[26,31,36,41],{"category":27},{"id":28,"icon":22,"name":29,"slug":30},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","GDPR","gdpr",{"category":32},{"id":33,"icon":22,"name":34,"slug":35},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":37},{"id":38,"icon":22,"name":39,"slug":40},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":42},{"id":20,"icon":22,"name":23,"slug":24},[],[18],{"controls":46,"vendors":47},[],[],{"slug":49,"title":50,"body":51,"framework_refs":52,"framework_notes":62},"individual-fined-for-unlawful-cctv-surveillance-violating-gdpr","Individual Fined for Unlawful CCTV Surveillance Violating GDPR","A Polish individual was fined for operating camera surveillance systems that extended beyond their own property onto public roads and neighbors' land, in direct violation of GDPR principles. The core failure was a disregard for a prior regulatory order to cease and remove the cameras, demonstrating willful non-compliance rather than ignorance. This case illustrates that personal data collection — including video footage of individuals in public or private spaces — is subject to strict legal boundaries under GDPR, even for private citizens. The potential use of surveillance to harass data subjects compounds the severity, highlighting how technology misuse can constitute both a data protection and a human rights violation. Regulators will impose financial penalties and may escalate enforcement when controllers fail to demonstrate corrective action.",[53,54,55,56,57,58,59,60,61],"GDPR Article 5(1)(a) – Lawfulness, fairness and transparency","GDPR Article 5(1)(b) – Purpose limitation","GDPR Article 5(1)(c) – Data minimisation","GDPR Article 6 – Lawful basis for processing","GDPR Article 35 – Data Protection Impact Assessment (DPIA)","NIST SP 800-122 – Guide to Protecting the Confidentiality of PII","CIS Control 3 – Data Protection","ISO\u002FIEC 27701 – Privacy Information Management","EDPB Guidelines 3\u002F2019 on processing of personal data through video devices",{}]