Polish Postal Service – €232,379 Fine (Poland, 2026)

€232,379Urząd Ochrony Danych Osobowych2 January 2026Poland
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Polish Postal Service was fined EUR 232,379 for not ensuring that their Data Protection Officer (DPO) could work independently. This is important because it shows that companies must avoid conflicts of interest to protect personal data properly. Businesses should ensure their DPOs can operate without any overlapping responsibilities that could compromise their role.

What happened

The Polish Postal Service was fined for appointing a DPO who also held a managerial position, creating a conflict of interest.

Who was affected

Employees and customers of the Polish Postal Service were affected by the lack of independent oversight in data protection.

What the authority found

The Urząd Ochrony Danych Osobowych ruled that the Polish Postal Service violated GDPR by not ensuring the DPO's independence from other managerial roles.

Why this matters

This ruling emphasizes the importance of having an independent DPO to manage data protection effectively. Companies should review their DPO appointments to avoid similar issues.

GDPR Articles Cited

AI-verified

View original scraped data
Art. 38(3) GDPR
(6) GDPR

Original data from scraper before AI verification against source document.

Source verified 6 March 2026
amount discrepancy
national law identified
Full Legal Summary
Detailed

The Polish DPA has imposed a fine of EUR 232,379 on the Polish Postal Service. The controller appointed a person as DPO who also held a managerial position with authority over security and classified information protection issues. However, the controller failed to conduct an analysis to ensure the DPO's independence. Furthermore, the controller was unable to ensure that the DPO could fulfil their role without any conflicts of interest.

Related Enforcement Actions (0)

No other enforcement actions found for Polish Postal Service in PL

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

2 January 2026

Authority

Urząd Ochrony Danych Osobowych

Fine Amount

€232,379

Enforcement Tracker ID

ETid-3031

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Polish Postal Service - Poland (2026). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: