[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDPeqZ_lHruwnfd7RFHtaX1iqfugTtEXMxdTfG85sKes":3},{"article":4,"iocs":43,"watch_terms":44,"solutions":45,"lesson":48},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"20286c93-235d-4a88-8963-cb1f4fa6ad3a","UODO (Poland) - DKE.561.7.2026","uodo-poland-dke-561-7-2026-1563b8","← Older revision Revision as of 06:39, 30 September 2026 Line 32: Line 32: |GDPR_Article_1=Article 32(1) GDPR |GDPR_Article_1=Article 58 GDPR |GDPR_Article_Link_1=Article 32 GDPR#1 |GDPR_Article_Link_1=Article 58 GDPR#1","Poland's UODO has fined a company PLN 31,507 (€7,200) for failing to provide the data protection authority with necessary access to personal data and other information. The investigation stemmed from a prior case where the company collected personal data but did not disclose its identity or contact information on its websites. Despite multiple attempts to contact the controller, the DPA initiated proceedings, leading to the fine for violating GDPR Articles 58(1)(a) and 58(1)(e).","UODO (Poland) fines a company PLN 31,507 for failing to provide access to data.","https:\u002F\u002Fgdprhub.eu\u002Findex.php?title=UODO_(Poland)_-_DKE.561.7.2026&diff=53226&oldid=53209","https:\u002F\u002Fgdprhub.eu\u002Fimages\u002F7\u002F7b\u002FLogoPL.png","2026-09-30T06:39:10+00:00","2026-09-30T08:00:16.224213+00:00",7,[17],{"name":18,"type":19},"UODO","vendor","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":20,"icon":22,"name":23,"slug":24},null,"Policy","policy",[26,31,36,38],{"category":27},{"id":28,"icon":22,"name":29,"slug":30},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","GDPR","gdpr",{"category":32},{"id":33,"icon":22,"name":34,"slug":35},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":37},{"id":20,"icon":22,"name":23,"slug":24},{"category":39},{"id":40,"icon":22,"name":41,"slug":42},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",[],[18],{"controls":46,"vendors":47},[],[],{"slug":49,"title":50,"body":51,"framework_refs":52,"framework_notes":63},"polish-dpa-fines-company-for-obstructing-gdpr-investigation-and-hiding-identity","Polish DPA Fines Company for Obstructing GDPR Investigation and Hiding Identity","A Polish company was fined for a dual failure: it collected personal data without disclosing its identity or contact details on its websites, and then refused to cooperate with UODO's investigation by denying the authority access to required information. These violations of GDPR Articles 58(1)(a) and 58(1)(e) undermine the fundamental accountability principle that data controllers must be identifiable and transparent. Regulatory cooperation is not optional — obstructing a DPA investigation compounds the original violation and significantly increases enforcement risk. This case highlights that transparency and responsiveness to supervisory authorities are non-negotiable obligations under GDPR.",[53,54,55,56,57,58,59,60,61,62],"GDPR Article 5(1)(a) – Lawfulness, fairness, and transparency","GDPR Article 13 – Information to be provided where personal data are collected from the data subject","GDPR Article 14 – Information where personal data have not been obtained from the data subject","GDPR Article 26 – Joint controllers","GDPR Article 30 – Records of processing activities","GDPR Article 58(1)(a) – DPA power to order controller to provide information","GDPR Article 58(1)(e) – DPA power to obtain access to personal data","NIST Privacy Framework PR.PO-P1 – Policies and procedures for data processing","CIS Control 3 – Data Protection","ITIL Service Management – Regulatory and compliance management practice",{}]