- Enforcing jurisdiction
- Poland · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Polish Postal Service – €232,379 Fine (Poland, 2026)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Polish Postal Service was fined €232,379 for appointing a Data Protection Officer (DPO) who also had managerial authority over security, leading to a conflict of interest. This ruling is crucial as it highlights the importance of having independent DPOs to protect personal data.
What happened
The Polish Postal Service was fined for appointing a DPO who held conflicting managerial responsibilities.
Who was affected
The organization and its customers, who rely on the DPO to ensure proper data protection without conflicts.
What the authority found
The Polish Data Protection Authority found that the Postal Service violated GDPR by not ensuring the DPO's independence from management roles.
Why this matters
This case emphasizes the need for organizations to appoint independent DPOs to effectively manage data protection and avoid conflicts of interest.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 6 March 2026.
Processing notes: amount discrepancy, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Polish DPA has imposed a fine of EUR 232,379 on the Polish Postal Service. The controller appointed a person as DPO who also held a managerial position with authority over security and classified information protection issues. However, the controller failed to conduct an analysis to ensure the DPO's independence. Furthermore, the controller was unable to ensure that the DPO could fulfil their role without any conflicts of interest.
Related Enforcement Actions (0)
No other enforcement actions found for Polish Postal Service in PL
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
2 January 2026
Authority
Urząd Ochrony Danych Osobowych
Fine Amount
€232,379
Enforcement Tracker ID
ETid-3031
About this data
Cite as: Cookie Fines. Polish Postal Service - Poland (2026). Retrieved from cookiefines.eu
Last updated: