DPA case DKE.561.7.2026 – Violation Found (Poland, 2026)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A data protection authority found that a company failed to provide necessary information during an investigation. The company did not respond to requests for data, which led to a fine. This case underscores the importance of cooperation with data protection authorities.
What happened
The company did not provide access to personal data and information requested by the data protection authority.
Who was affected
Individuals whose data was collected by the company operating the two websites.
What the authority found
The data protection authority ruled that the company violated rules by not cooperating and providing required information.
Why this matters
This ruling stresses the need for companies to comply with data protection investigations. Failing to cooperate can lead to significant penalties.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 18 October 2026.
Processing notes: articles corrected, national law identified, amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The DPA launched an investigation into two websites operated by the controller under case number DKN.5101.8.2025. The controller collected the names and the occupations of individuals (the data subjects) and had not disclosed its identity and contact information on the websites. The DPA requested the controller to provide information on the processing operations pursuant to Articles 58(1)(a) and 58(1)(e) GDPR. It attempted to contact the controller by sending it a letter on 15 April, an email on 15 May, and another email on 5 June. The DPA also called the business owner's contact number on 10 and 12 June, but the number was unavailable. Due to the unsuccessful attempts to contact the controller in connection with the proceedings in case DKN.5101.8.2025, the DPA initiated the administrative proceedings at issue against the controller. The controller was notified of this on June 15. The controller did not submit any additional explanations regarding the previous case, nor did it provide the data necessary to determine the basis for calculating the administrative fine in the present proceedings. The DPA held that the controller had failed to provide the DPA access to personal data and other information it required for the performance of its tasks and issued the controller a fine of PLN 31,507 (€7,200). It found that the controller had violated Articles 58(1)(a) and 58(1)(e) GDPR.
Outcome
Violation Found
The DPA found a violation but did not impose a fine.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case DKE.561.7.2026 in PL
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. DPA case DKE.561.7.2026 - Poland (2026). Retrieved from cookiefines.eu
Last updated: