Sanction RGPD Polish National Personal Data Protection Office (UODO) — Polish Postal Service : 232 k€ (2026)
- Autorité de contrôle
- Polish National Personal Data Protection Office (UODO)
- Pays
- Pologne
- Entreprise / secteur
- Polish Postal Service
- Montant de l'amende
- 232 k€
- Date de la décision
- 2 janvier 2026
- Fondement juridique
- Art. 38 (3), (6)
- Manquement
- Absence de désignation d'un DPO
Résumé des faits
The Polish DPA has imposed a fine of EUR 232,379 on the Polish Postal Service. The controller appointed a person as DPO who also held a managerial position with authority over security and classified information protection issues. However, the controller failed to conduct an analysis to ensure the DPO's independence. Furthermore, the controller was unable to ensure that the DPO could fulfil their role without any conflicts of interest.