First penalty imposed on a public entity for GDPR infringement (POLAND)

The President of the Personal Data Protection Office imposed the first penalty for GDPR violation on a public entity – the Mayor of Aleksandrów Kujawski. The Mayor has to pay PLN40,000 fine and remedy the infringement within 60 days. The main reasons for this decision was failure to enter into data processing agreements and storage of certain data, including asset declarations, longer than is allowed under the law.

Employee alcohol testing and GDPR (Poland)

Employers have no right to alcohol test their employees on their own, and that includes random testing – this is the position of the President of the Personal Data Protection Office (UODO) in response to the amendment of the Labour Code that became effective on 4 May 2019.