The president of the Polish Personal Data Protection Authority (UODO) informed the Ministry of Foreign Affairs that the implementation of a ruling by the Court of Justice of the European Union (CJEU) concerning anti-doping rules requires an amendment to Polish law.

In its correspondence, the authority relies on the judgment of 14 July 2026 in case C-474/24, NADA Austria et al. The Court ruled that the publication of data on sanctioned athletes (name, discipline, violation, sanction) falls under the GDPR. It specified that information about an anti-doping violation is not health data within the meaning of Article 9 of the GDPR, unless it mentions the substance or method, which could indirectly reveal a health condition. Publication is permitted by the GDPR if national law provides for an individual balancing of the interests at stake. However, the Polish anti-doping law does not regulate this publication in detail, merely referring to the World Anti-Doping Code and the rules of the Polish Anti-Doping Agency (POLADA), which provide for the disclosure of the substance or method used. The president of the UODO considers that this legal basis is not sufficiently clear and precise as required by the GDPR, and that the current practice risks disclosing health data, making an amendment to national provisions necessary.