Poland

Sub Agent

2,415 €

GDPR enforcement action by Polish National Personal Data Protection Office (UODO) on 2026-04-13.

Rank · Sector

#413

of 602 in Industry and Commerce

Rank · Poland

#95

of 113

Rank · All fines

#2,202

of 3,063

Case details

Authority: Polish National Personal Data Protection Office (UODO)
Date: 2026-04-13
Controller / Processor: Sub Agent
Sector: Industry and Commerce
Quoted Articles: Art. 28 (4) GDPR, Art. 32 (1), (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Polish DPA has imposed a fine of EUR 2,415 on a sub agent. The sub agent had been active with a company during the pandemic. During this time, the sub agent and other agents had been conducting door-to-door sales. During these sales, they sent customer data to each other via unauthorised tools on their private phones. As the sub agent had introduced the use of the tool, they were fined, while the other agents only received a reprimand.

Open original source Links to the regulator's original publication or another source.