🇵🇱

GDPR Fines in Poland

13 data protection authorities · Since 2019

Total Actions

184

Total Fines

€35.4M

Average Fine

€266K

Among actions with fines

Enforcement Trend

Decreasing

About Data Protection Enforcement in Poland

Poland is an active enforcer of GDPR and ePrivacy requirements, with 13 data protection authorities overseeing compliance since 2019. To date, Poland's regulators have taken 184 enforcement actions totaling €35,395,515 in fines. The landmark case was a €6,300,000 fine against Poczta Polska SA (Polish Post) in 2025, among the most significant GDPR and ePrivacy penalties recorded for this jurisdiction. Enforcement activity has moderated in recent years, potentially indicating improved compliance across the market or a shift in regulatory priorities. The most frequently enforced violations are third-party cookies without consent (2 cases), cannot withdraw cookie consent (1 cases), reflecting the regulatory focus areas in this jurisdiction.

Enforcement Actions by Year

YearActionsTotal Fines
201910€1.2M
202024€822K
202127€553K
202223€2.8M
202327€178K
202432€4.2M
202528€21.0M
202613€4.6M

Frequently Asked Questions

How many GDPR and ePrivacy enforcement actions has Poland issued?

Poland has issued 184 enforcement actions related to GDPR and ePrivacy, totaling €35.4M in fines.

What is the largest GDPR and ePrivacy fine in Poland?

The largest recorded penalty was a €6.3M fine against Poczta Polska SA (Polish Post) on 2025-03-17.

How many data protection authorities operate in Poland?

Poland has 13 data protection authorities overseeing GDPR and ePrivacy enforcement.

Is GDPR and ePrivacy enforcement decreasing in Poland?

GDPR and ePrivacy enforcement in Poland has been decreasing in recent years.