🇵🇱

Urząd Ochrony Danych Osobowych

Data protection authority of Poland

Official website

Total Actions

154

Total Fines

€35.4M

Average Fine

€266K

Among actions with fines

Enforcement Factor

1.20

Measured

About Urząd Ochrony Danych Osobowych

The Urząd Ochrony Danych Osobowych is Poland's data protection authority responsible for enforcing GDPR and data-protection compliance. Urząd Ochrony Danych Osobowych has taken 154 enforcement actions resulting in €35,395,515 in total penalties, with an average fine of €266K per sanctioned entity. The authority maintains a balanced enforcement approach (enforcement factor: 1.2), combining deterrent fines with corrective orders. Its most significant action was a €6,300,000 fine against Poczta Polska SA (Polish Post) in 2025. The most frequently cited legal basis in Urząd Ochrony Danych Osobowych's decisions is (2) GDPR and Art. 32(1) GDPR.

Enforcement by Year

YearActionsTotal Fines
201910€1.2M
202022€822K
202120€553K
202219€2.8M
202324€178K
202428€4.2M
202520€21.0M
202611€4.6M

Most Enforced Violations

Cannot Withdraw Cookie Consent
1

Most Cited GDPR Articles

Art. 32(1) GDPR
33
Art. 25(1) GDPR
32
Art. 33(1) GDPR
30
Art. 34(1) GDPR
28
Art. 5(2) GDPR
24
Art. 24(1) GDPR
23
Art. 5(1)(f) GDPR
19
Art. 6(1) GDPR
17

Frequently Asked Questions

How many GDPR and data-protection actions has Urząd Ochrony Danych Osobowych issued?

Urząd Ochrony Danych Osobowych has issued 154 enforcement actions related to GDPR and data-protection, totaling €35.4M.

What is Urząd Ochrony Danych Osobowych's largest GDPR and data-protection fine?

The largest was a €6.3M fine against Poczta Polska SA (Polish Post) on 2025-03-17.

What violations does Urząd Ochrony Danych Osobowych enforce most?

The most commonly enforced violations by Urząd Ochrony Danych Osobowych are cannot withdraw cookie consent.

Explore More

All Poland Enforcement

Country overview and DPA list

All Countries

Browse enforcement across Europe

Risk Calculator

Estimate your compliance risk