Law note · Poland
UODO Enforcement, GDPR Article 82, and Act Articles 98, 101-108
UODO is Poland's supervisory authority. The Act creates a distinct two-track fine structure, confirmed by direct read: Article 101 lets UODO fine any controller other than a public-finance-sector unit, research institute, or the National Bank of Poland under ordinary General Data Protection Regulation (GDPR) Article 83 terms, while Article 102 caps fines for those three categories at 100,000 or 10,000 PLN.
GDPR Article 82 arms an individual with a direct private right of action, and Article 98 gives UODO its own standing to bring or join a data subject's civil claim, with that person's consent, at any procedural stage.
What it asks of an app
- Expect UODO to have General Data Protection Regulation (GDPR) Article 83 fining power over your processing of personal data of a person in Poland.
- Expect any person in Poland who suffered material or non-material damage from an infringement to have a direct GDPR Article 82 right to compensation, which UODO may itself help bring under Act Article 98.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot, processes_biometrics, processes_voice
Primary source: isap.sejm.gov.pl, Ustawa z 10 maja 2018 r., Arts. 101-108, 98 (direct read)