UODO (Poland) - DKE.561.7.2026
UODO (Poland) fines a company PLN 31,507 for failing to provide access to data.
Poland's UODO has fined a company PLN 31,507 (€7,200) for failing to provide the data protection authority with necessary access to personal data and other information. The investigation stemmed from a prior case where the company collected personal data but did not disclose its identity or contact information on its websites. Despite multiple attempts to contact the controller, the DPA initiated proceedings, leading to the fine for violating GDPR Articles 58(1)(a) and 58(1)(e).
AI summary of the linked source. Not reviewed by an editor. How this works
Run UODO?
Get an email when a new story names UODO, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonA Polish company was fined for a dual failure: it collected personal data without disclosing its identity or contact details on its websites, and then refused to cooperate with UODO's investigation by denying the authority access to required information. These violations of GDPR Articles 58(1)(a) and 58(1)(e) undermine the fundamental accountability principle that data controllers must be identifiable and transparent. Regulatory cooperation is not optional — obstructing a DPA investigation compounds the original violation and significantly increases enforcement risk. This case highlights that transparency and responsiveness to supervisory authorities are non-negotiable obligations under GDPR.