Poland UODO (alt)

Poland UODO News Page with Recent Announcements

The Polish Personal Data Protection Office (UODO) publishes a news and events listing featuring approximately 50 recent announcements spanning January–April 2026. Items cover court decisions (including Supreme Administrative Court rulings on fines against Santander Bank Polska and Radio Szczecin), GDPR enforcement actions, legislative amendments to the Act implementing the Law Enforcement Directive, conferences on AI and personal data protection, data retention standards, public procurement data protection, and training activities for doctors and court officials.

UODO Requests Polish Law Enforcement Directive Amendments

The President of Poland's Personal Data Protection Office (UODO) has formally requested that the Minister of the Interior and Administration and the Minister of Justice initiate legislative work to fully implement the EU Law Enforcement Directive (Directive (EU) 2016/680) into Polish law. The request identifies critical gaps including: incomplete coverage of personal data processing for criminal justice purposes; absence of fundamental data subject rights in criminal procedure legislation (right to information, access, rectification, erasure, restriction of processing, and the right to lodge complaints); inadequate supervision mechanisms for courts and the Public Prosecutor's Office that fail to meet the Directive's requirement for independent oversight; and the lack of sanctioning instruments for the UODO President despite Article 57 requiring effective, proportionate, and dissuasive penalties.

Deputy President Komornicki Discusses AI Data at Banking Forum

On April 14, 2026, Deputy President Konrad Komornicki of the Personal Data Protection Office participated in a panel at the Banking & Insurance Forum, discussing 'AI-ready data in banks: how to build coherent and secure data ecosystems?' The forum brings together representatives from banking and insurance sectors, regulators, and financial market experts. Discussion topics included building trust in data processing, data sharing principles, ensuring data quality in AI environments, and data as a component of critical infrastructure.