Who was sanctioned, and for what?

The KNF imposed five fines totalling PLN 47,500,000 on PKO BP in connection with structured deposits: PLN 26m for failing to inform clients of existing conflicts of interest, PLN 8m each for not analysing costs and charges and for an imprecise definition of the risk category and target market, PLN 4m for selling without checking target-market suitability and PLN 1.5m for misleading sales material on two products. The decision is not final.

Authority / court

Komisja Nadzoru Finansowego (KNF)

Area of law

Capital markets and financial supervision · Organisational requirements

Legal basis

Art. 88c Abs. 1 und 2, Art. 88m Abs. 5 und 9 Prawo bankowe i. V. m. Verordnung des Finanzministers vom 21.01.2019 über Dienstleistungen der Banken bei strukturierten Einlagen

Action

Fine

Status of proceedings

unknown

Sector

Financial services and insurance

Original amount 47,500,000 PLN, converted at the ECB reference rate of 5 Aug 2026.

Checked against the official source on 28 Sep 2026 · Direct link

On its Allegro account, the electronics retailer promised dispatch within 24 hours even for goods not in stock and did not inform customers in good time of delays or unavailability. UOKiK imposed a fine of 3,043,000 PLN; the decision is not final.

Authority / court

Urząd Ochrony Konkurencji i Konsumentów (UOKiK)

Area of law

Consumer protection and online retail · Information duties in online retail

Legal basis

Verletzung kollektiver Verbraucherinteressen

Action

Fine

Status of proceedings

unknown

Sector

Retail and e-commerce

Published

26 Jun 2026

Original amount 3,043,000 PLN, converted at the ECB reference rate of 26 Jun 2026.

Checked against the official source on 25 Sep 2026 · Direct link

The KNF imposed four fines totalling PLN 14,900,000 on mBank: PLN 0.4m and 6m because staff negotiated client transactions with unauthorised third parties and passed client information to them, PLN 5m for not treating currency hedging transactions as financial instruments and PLN 3.5m for ineffective internal control and compliance functions. Following a request for reconsideration, the KNF upheld the decision on 28 August 2026; it is not final.

Authority / court

Komisja Nadzoru Finansowego (KNF)

Area of law

Capital markets and financial supervision · Organisational requirements

Legal basis

§ 8 Abs. 1 i. V. m. § 26 Nr. 1 Verordnung des Finanzministers vom 24.09.2012; Art. 83b Abs. 3 und 6, Art. 83c Abs. 1 ustawa o obrocie instrumentami finansowymi; Art. 9c Abs. 1 Nr. 4 Prawo bankowe; Art. 21 und 22 Delegierte Verordnung (EU) 2017/565

Action

Fine

Status of proceedings

unknown

Sector

Financial services and insurance

Original amount 14,900,000 PLN, converted at the ECB reference rate of 29 May 2026.

Checked against the official source on 28 Sep 2026 · Direct link

The manufacturer Decora and the wholesaler Bel-Pol had coordinated prices for vinyl panels, underlays, skirting boards and floor profiles from Decora's range and divided the wholesale market for these products. UOKiK imposed fines of PLN 28,344,000 on Decora and PLN 5,290,000 on Bel-Pol, PLN 33,634,000 in total. The decision is not final.

Authority / court

Prezes Urzędu Ochrony Konkurencji i Konsumentów (UOKiK)

Area of law

Competition law · Cartels and collusion

Legal basis

Art. 6 Abs. 1 Nr. 1 und 3 ustawa o ochronie konkurencji i konsumentów; Art. 101 Abs. 1 lit. a und c AEUV; Art. 106 Abs. 1 Nr. 1 und 2, Art. 113c und Art. 89a ustawa o ochronie konkurencji i konsumentów

Action

Fine

Status of proceedings

under appeal

Sector

Construction and real estate

Mitigating circumstances

As a leniency applicant, Bel-Pol received a 50% reduction of its fine and a further 10% for voluntarily accepting the fine (settlement).

Liability of senior managers

Measures against individuals are not reported here.

Original amount 33,634,000 PLN, converted at the ECB reference rate of 4 May 2026.

Checked against the official source on 28 Sep 2026 · Direct link

The KNF fined the insurer Compensa PLN 8,500,000 because, in motor third-party liability insurance (class 10) in 2022 to 2024, it set premiums that were insufficient to cover all obligations under the contracts and the costs of its insurance business. The decision is not final.

Authority / court

Komisja Nadzoru Finansowego (KNF)

Area of law

Capital markets and financial supervision · Organisational requirements

Legal basis

Art. 33 Abs. 2 ustawa z dnia 11 września 2015 r. o działalności ubezpieczeniowej i reasekuracyjnej

Action

Fine

Status of proceedings

unknown

Sector

Financial services and insurance

Original amount 8,500,000 PLN, converted at the ECB reference rate of 27 Apr 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Acting as processor, the property management company sent an owner’s statement of service charges to an unauthorised person. The association considered notification unnecessary because only ‘ordinary’ data of one member were affected, and maintained this position in the proceedings; the UODO (Poland’s data protection authority) imposed 4,852 PLN.

Authority / court

Prezes Urzędu Ochrony Danych Osobowych (UODO)

Area of law

Information security and cyber · Incident reporting obligations

Legal basis

Art. 33 Abs. 1 DSGVO

Action

Fine

Status of proceedings

final

Sector

Construction and real estate

Original amount 4,852 PLN, converted at the ECB reference rate of 7 Apr 2026.

Checked against the official source on 25 Sep 2026 · Direct link

The KNF imposed a fine of PLN 15,000,000 on the listed issuer LPP for breaches of disclosure obligations in its consolidated financial statements for 2021/2022 and 2022/2023. LPP had wrongly recognised impairments of PLN 608m on fixed assets and inventories resulting from the Russian attack on Ukraine of 24 February 2022 as an adjusting event in the 2021/2022 statements and did not correct the comparative figures in the following year, although the authority had repeatedly recommended this and the auditor had issued qualifications. The decision is not final.

Authority / court

Komisja Nadzoru Finansowego (KNF)

Area of law

Capital markets and financial supervision · Disclosure and reporting obligations

Legal basis

Art. 56 Abs. 1 Nr. 2 lit. a ustawa o ofercie publicznej i. V. m. § 3 Abs. 1 und 3 sowie § 71 Abs. 1 Nr. 3 lit. b Verordnung des Finanzministers über laufende und periodische Informationen; IAS 2, 8, 10 und 36

Action

Fine

Status of proceedings

unknown

Sector

Retail and e-commerce

Original amount 15,000,000 PLN, converted at the ECB reference rate of 2 Apr 2026.

Checked against the official source on 28 Sep 2026 · Direct link

The KNF fined the brokerage XTB PLN 20,000,000 because, between January 2022 and September 2023, it did not properly assess clients' knowledge and experience, did not adequately define the target market for complex instruments such as CFDs, failed to identify possible conflicts of interest arising from the „lista HOT“ distributed to clients and gave clients unreliable information on CFD risks. At XTB's request the KNF reconsidered the case and upheld the decision on 28 August 2026.

Authority / court

Komisja Nadzoru Finansowego (KNF)

Area of law

Capital markets and financial supervision · Organisational requirements

Legal basis

Art. 34 Abs. 2 lit. a, Art. 48 und Art. 56 Abs. 1 Delegierte Verordnung (EU) 2017/565; § 37 Abs. 5 Nr. 6 i. V. m. § 31 Abs. 7 Verordnung des Finanzministers vom 30.05.2018; Art. 83c Abs. 2 und Abs. 4 Nr. 2 ustawa o obrocie instrumentami finansowymi

Action

Fine

Status of proceedings

unknown

Sector

Financial services and insurance

Original amount 20,000,000 PLN, converted at the ECB reference rate of 30 Mar 2026.

Checked against the official source on 28 Sep 2026 · Direct link

The KNF imposed eight fines totalling PLN 21,100,000, among other things for cooperating with unauthorised third parties in client transactions (PLN 2m and 4m), transactions with clients outside the target market (PLN 2.5m), missing cost information on currency hedging transactions (PLN 1m), a non-compliant remuneration system (PLN 0.5m), the execution of orders relating to „Oprocentowanie Nie Wyższe Niż“ (PLN 7m), ineffective internal control and compliance functions (PLN 4m) and failure to archive client correspondence (PLN 0.1m). Following a request for reconsideration, the KNF upheld the fines on 28 August 2026; an action before the administrative court is possible.

Authority / court

Komisja Nadzoru Finansowego (KNF)

Area of law

Capital markets and financial supervision · Organisational requirements

Legal basis

Art. 83b Abs. 3, Art. 83c Abs. 1 und 4, Art. 83e Abs. 1 ustawa o obrocie instrumentami finansowymi; § 8 Abs. 1 i. V. m. § 26 Nr. 1 Verordnung des Finanzministers vom 24.09.2012; Art. 9c Abs. 1 Nr. 4 und Art. 88k Abs. 6a Prawo bankowe

Action

Fine

Status of proceedings

unknown

Sector

Financial services and insurance

Original amount 21,100,000 PLN, converted at the ECB reference rate of 4 Mar 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Since 2019, the delivery platform had required scans or photos of its users’ identity cards and passports in cases of suspected fraud, relying on legitimate interests. The Prezes Urzędu Ochrony Danych Osobowych (President of Poland’s data protection authority, UODO) regarded this as processing without a legal basis and a breach of data minimisation, imposed 5,898,064 PLN and ordered the processing to stop and the data to be erased.

Authority / court

Prezes Urzędu Ochrony Danych Osobowych (UODO)

Area of law

Data protection · Data subject rights and transparency

Legal basis

Art. 5 Abs. 1 lit. a und c, Art. 5 Abs. 2, Art. 6 Abs. 1 DSGVO (DKN.5112.33.2022)

Action

Fine

Status of proceedings

final

Sector

Media and online platforms

Published

16 Mar 2026

Original amount 5,898,064 PLN, converted at the ECB reference rate of 19 Feb 2026.

Checked against the official source on 25 Sep 2026 · Direct link

The UODO (Urząd Ochrony Danych Osobowych, Polish data protection authority) fined the parcel carrier DPD Polska sp. z o.o. a total of PLN 11,461,030. PLN 6,251,471 relates to the company using external hauliers for shipments between its depots without a data processing agreement under Art. 28(3) GDPR, although they had access to the address labels during loading and unloading; PLN 5,209,559 relates to staff not being given effective authorisations to process data and the company's own data protection policy not being implemented (Art. 24, 29, 32 GDPR). The authority classed both infringements as intentional and treated earlier reprimands against the company as aggravating. The decision is not final.

Authority / court

Prezes Urzędu Ochrony Danych Osobowych (UODO)

Area of law

Data protection · Data processors

Legal basis

Art. 28 Abs. 3 i. V. m. Art. 5 Abs. 1 lit. a und Abs. 2 DSGVO; Art. 24 Abs. 1 und 2, Art. 29, Art. 32 Abs. 1 und 4 i. V. m. Art. 5 Abs. 1 lit. f und Abs. 2 DSGVO; Art. 83 Abs. 4 lit. a und Abs. 5 lit. a DSGVO

Action

Fine

Status of proceedings

unknown

Sector

Transport, logistics and shipping

Culpability

intentional

Repeat case

yes

Mitigating circumstances

It was treated as mitigating that, after the proceedings were opened, DPD amended its contracts with the hauliers to include data processing terms and changed its procedure for granting authorisations.

Liability of senior managers

No personal liability was established.

Published

23 Feb 2026

Original amount 11,461,030 PLN, converted at the ECB reference rate of 5 Feb 2026.

Checked against the official source on 28 Sep 2026 · Direct link

With effect from 4 April 2022, Orange Polska unilaterally introduced a fee for keeping the phone number active in existing prepaid contracts, although neither the law nor the contract allowed this change, and it failed to disclose the fee on starter packs and on its website. UOKiK classed both as unfair practices and imposed fines of PLN 17,325,000 and PLN 7,425,000, totalling PLN 24,750,000. The decision is not final.

Authority / court

Prezes Urzędu Ochrony Konkurencji i Konsumentów (UOKiK)

Area of law

Consumer protection and online retail · Misleading advertising and pricing

Legal basis

Art. 24 Abs. 2 Nr. 3 und Art. 27 ustawa o ochronie konkurencji i konsumentów i. V. m. Art. 4 und Art. 6 ustawa o przeciwdziałaniu nieuczciwym praktykom rynkowym

Action

Fine

Status of proceedings

under appeal

Sector

Telecoms, IT and software

Original amount 24,750,000 PLN, converted at the ECB reference rate of 30 Jan 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Zalando did not display the lowest price of the previous 30 days for discounts, manipulated reference prices to make reductions appear larger and did not present the mandatory information consistently at all stages of the purchasing process. Poland's Office of Competition and Consumer Protection (UOKiK) imposed a fine of 30,945,000 PLN; the decision is not final.

Authority / court

Urząd Ochrony Konkurencji i Konsumentów (UOKiK)

Area of law

Consumer protection and online retail · Misleading advertising and pricing

Legal basis

Polnische Umsetzung der Omnibus-Richtlinie (Preisangaben bei Preisermäßigungen); Verletzung kollektiver Verbraucherinteressen

Action

Fine

Status of proceedings

unknown

Sector

Retail and e-commerce

Employees

10,000 or more

Published

14 Jan 2026

Original amount 30,945,000 PLN, converted at the ECB reference rate of 14 Jan 2026.

Checked against the official source on 25 Sep 2026 · Direct link

The operator of the Temu interface omitted the 30-day lowest price or stated it incorrectly, labelled promotions inconsistently and changed reference prices from day to day without the actual price changing. UOKiK imposed a fine of 5,910,900 PLN; the decision is not final.

Authority / court

Urząd Ochrony Konkurencji i Konsumentów (UOKiK)

Area of law

Consumer protection and online retail · Misleading advertising and pricing

Legal basis

Polnische Umsetzung der Omnibus-Richtlinie (Preisangaben bei Preisermäßigungen); Verletzung kollektiver Verbraucherinteressen

Action

Fine

Status of proceedings

unknown

Sector

Retail and e-commerce

Published

14 Jan 2026

Original amount 5,910,900 PLN, converted at the ECB reference rate of 14 Jan 2026.

Checked against the official source on 25 Sep 2026 · Direct link

The function of data protection officer was performed by a manager who was at the same time responsible for security and protection of classified information and thus monitored their own activities; there was no conflict analysis. Poland’s data protection authority (UODO) imposed 978,128 PLN and referred to numerous previous reprimands and orders against the company.

Authority / court

Prezes Urzędu Ochrony Danych Osobowych (UODO)

Area of law

Data protection

Legal basis

Art. 38 Abs. 3 und 6 DSGVO (DKN.5131.4.2025)

Action

Fine

Status of proceedings

unknown

Sector

Transport, logistics and shipping

Employees

10,000 or more

Repeat case

yes

Mitigating circumstances

During the proceedings the function was made independent and placed directly under the management board.

Published

26 Jan 2026

Original amount 978,128 PLN, converted at the ECB reference rate of 2 Jan 2026.

Checked against the official source on 25 Sep 2026 · Direct link

UOKiK sanctioned CNH Industrial Polska and seven dealers of the New Holland, Case IH and Steyr brands for dividing the Polish market for agricultural machinery of these brands and coordinating prices. The fines on the undertakings total PLN 338,827,000 (CNH Industrial Polska 241,599,000, Raitech 24,391,000, Perkoz 23,778,000, Adler Agro 15,335,000, Rolserwis 13,356,000, a further dealer company (partnership) 8,249,000, Kisiel Agrotech 6,778,000, Kisiel 5,341,000 PLN). Fines on natural persons are not included in the amount. The decision is not final.

Authority / court

Prezes Urzędu Ochrony Konkurencji i Konsumentów (UOKiK)

Area of law

Competition law · Cartels and collusion

Legal basis

Art. 6 Abs. 1 Nr. 1 und 3 ustawa o ochronie konkurencji i konsumentów; Art. 101 Abs. 1 lit. a und c AEUV

Action

Fine

Status of proceedings

under appeal

Sector

Manufacturing and mechanical engineering

Liability of senior managers

Measures against individuals are not reported here.

Original amount 338,827,000 PLN, converted at the ECB reference rate of 9 Dec 2025.

Checked against the official source on 28 Sep 2026 · Direct link

The supermarket chain advertised promotions such as "Special Wednesday" with "100 % money back as a voucher", but did not state restrictions concerning product categories, minimum spend and use of the vouchers in radio, app and in-store advertising, only on the receipt, the website or in-store notices. UOKiK imposed a fine of 104,722,016 PLN; the decision is not final.

Authority / court

Urząd Ochrony Konkurencji i Konsumentów (UOKiK)

Area of law

Consumer protection and online retail · Misleading advertising and pricing

Legal basis

Verletzung kollektiver Verbraucherinteressen (irreführende Werbung durch Unterlassen)

Action

Fine

Status of proceedings

unknown

Sector

Retail and e-commerce

Employees

10,000 or more

Culpability

intentional

Published

4 Dec 2025

Original amount 104,722,016 PLN, converted at the ECB reference rate of 4 Dec 2025.

Checked against the official source on 25 Sep 2026 · Direct link

In October 2023, an uninvolved person received a debtor’s enforcement documents containing name, address, date of birth, PESEL number, amount of the claim and employer. The bailiff’s office neither notified the supervisory authority nor informed the data subject; the UODO (Poland’s data protection authority) imposed 7,700 PLN for the failure to notify and 13,200 PLN for the failure to inform the data subject, and ordered the data subject to be informed within three days.

Authority / court

Prezes Urzędu Ochrony Danych Osobowych (UODO)

Area of law

Information security and cyber · Incident reporting obligations

Legal basis

Art. 33 Abs. 1, Art. 34 Abs. 1 und 2 DSGVO

Action

Fine

Status of proceedings

unknown

Sector

Public sector

Original amount 20,900 PLN, converted at the ECB reference rate of 23 Oct 2025.

Checked against the official source on 25 Sep 2026 · Direct link

For almost six years, the chair of the management board of the medical company was also its data protection officer; this came to light after a report that a patient had been handed documents relating to another person. Poland’s data protection authority (UODO) found a conflict of interest and imposed 11,365 PLN.

Authority / court

Prezes Urzędu Ochrony Danych Osobowych (UODO)

Area of law

Data protection

Legal basis

Art. 38 Abs. 6 DSGVO (DKN.5131.7.2025)

Action

Fine

Status of proceedings

final

Sector

Healthcare

Mitigating circumstances

An independent external data protection officer was appointed in July 2024.

Published

29 Sep 2025

Original amount 11,365 PLN, converted at the ECB reference rate of 12 Sep 2025.

Checked against the official source on 25 Sep 2026 · Direct link

Data of employees of McDonald’s and its franchisees from the rota module (including names, PESEL or passport numbers, working hours, positions) sat in a publicly accessible directory. UODO found that McDonald’s Polska had carried out no risk analysis, implemented no appropriate safeguards and not effectively supervised its processor, and imposed fines of PLN 1,632,063, 13,600,528 and 1,700,066 (PLN 16,932,657 in total) and a reprimand; the processor 24/7 Communication received PLN 94,286, 42,429 and 47,143 (PLN 183,858), making PLN 17,116,515 overall. The decision is not final.

Authority / court

Prezes Urzędu Ochrony Danych Osobowych (UODO)

Area of law

Data protection · Employee data

Legal basis

Art. 5 Abs. 1 lit. c und f, Art. 5 Abs. 2, Art. 25 Abs. 1, Art. 28 Abs. 1, Art. 32 Abs. 1 und 2, Art. 38 Abs. 1 DSGVO sowie Art. 34 Abs. 1 und 3 lit. c DSGVO (Verwarnung) (Verantwortlicher); Art. 28 Abs. 3 lit. c, Abs. 4 und 9, Art. 32 Abs. 1 und 2, Art. 38 Abs. 1 DSGVO (Auftragsverarbeiter)

Action

Fine

Status of proceedings

under appeal

Sector

Food and agriculture

Published

21 Jul 2025

Original amount 17,116,515 PLN, converted at the ECB reference rate of 23 Jun 2025.

Checked against the official source on 28 Sep 2026 · Direct link