UODO — Poland's Data Protection Authority
The President of UODO can conduct inspections, impose fines up to EUR 20 million or 4% of global turnover, and prohibit data processing.
How Proceedings Are Initiated
Data subject complaint, breach notification (72 hours), planned inspection, or media information.
How UODO Inspections Work
Inspectors can access premises, examine documents and IT systems, request explanations. Inspection concludes with a report — 7 days for objections.
Most Common Violations
Lack of data processing agreements, no encryption, no processing records, failure to notify breaches within 72h, no legal basis for processing.
Appealing UODO Decisions
Complaint to the Provincial Administrative Court in Warsaw — 30 days. Court reviews legality. Further: cassation to Supreme Administrative Court.
How to Prepare for an Inspection
Up-to-date GDPR documentation, regular internal audits, trained personnel, appointed DPO.
UODO inspection or fine? Get in touch — I'll help prepare your defense.