Poland

Polish Postal Service

232,379 €

GDPR enforcement action by Polish National Personal Data Protection Office (UODO) on 2026-01-02.

Rank · Sector

#27

of 356 in Public Sector and Education

Rank · Poland

#16

of 110

Rank · All fines

#327

of 3,042

Case details

Authority: Polish National Personal Data Protection Office (UODO)
Date: 2026-01-02
Controller / Processor: Polish Postal Service
Sector: Public Sector and Education
Quoted Articles: Art. 38 (3), (6) GDPR
Type of violation: Lack of appointment of data protection officer

Summary

The Polish DPA has imposed a fine of EUR 232,379 on the Polish Postal Service. The controller appointed a person as DPO who also held a managerial position with authority over security and classified information protection issues. However, the controller failed to conduct an analysis to ensure the DPO's independence. Furthermore, the controller was unable to ensure that the DPO could fulfil their role without any conflicts of interest.

Open original source Links to the regulator's original publication or another source.