Poland

Sole trader

7,500 €

GDPR enforcement action by Polish National Personal Data Protection Office (UODO) on 2026-09-01.

Rank · Sector

#269

of 628 in Industry and Commerce

Rank · Poland

#60

of 122

Rank · All fines

#1,613

of 3,170

Case details

Authority: Polish National Personal Data Protection Office (UODO)
Date: 2026-09-01
Controller / Processor: Sole trader
Sector: Industry and Commerce
Quoted Articles: Art. 58 (1) a), e) GDPR, Art. 83 (5) e) GDPR
Type of violation: Insufficient cooperation with supervisory authority

Summary

The Polish DPA has imposed a fine of EUR 7,500 on a sole trader. The authority received a tip-off stating that two websites run by a sole trader had published the names and professions of other professionals, claiming that these individuals had written the articles. The authority found that the websites did not name a controller or provide contact details. Subsequently, on 26 February, 2 May and 5 December 2025, the authority contacted the controller, who confirmed in response to these letters that they were the controller. The authority then followed up on 20 March and 15 April 2025 with a request for information regarding the current controllership, the reason for the change in website administration, and the legal basis for data transfers. The controller did not answer these letters. Further attempts to contact the individual via telephone and email, the latest of which was on 12 June 2026, also failed.

Open original source Links to the regulator's original publication or another source.