Your Data Protection 2024: UODO Report on Complaints, Fines, and New Threats
In 2024, Poles filed a record number of over 8,000 data protection complaints, and the authority imposed fines totaling nearly PLN 14 million. Common issues included illegal data sharing by companies and public offices, marketing without consent, and abuses in the health and finance sectors. The report also highlights new threats like deepfake ads and the use of data to train artificial intelligence.
Key points
Increase in citizen complaints: Poles filed 16% more complaints than the previous year, mostly against private companies, banks, medical facilities, and public offices.
Record financial penalties: The authority imposed nearly PLN 14 million in fines for violations, a more than tenfold increase compared to 2023.
Abuse by doctors: A common problem was doctors unlawfully checking data of patients (and non-patients) in the PUE ZUS system for private purposes.
New technologies under scrutiny: The authority intervened in cases of deepfake advertising and is analyzing the use of data for training AI by global platforms.
Errors by offices and companies: The most common breaches include sending correspondence to the wrong address, losing documents, and improperly publishing data online (e.g., on BIP websites).
Use of PESEL number: The authority highlights issues with the excessive use and disclosure of the PESEL national identification number, e.g., in electronic signatures used for work.
Status:
In Progress
Record your position for audit.
Why does your vote on bills matter?
It creates raw, undeniable proof. Civic Will provides the permanent data to verify the Government's loyalty towards its citizens
(explained here).
Start recording it now.