The Polish data protection authority has published its activity report for the year 2025, highlighting a strong increase in its actions and requests from data subjects.

In 2025, the Office for Personal Data Protection (UODO) received 12,827 complaints, an increase of 61% compared to 2024. These complaints notably concerned data publication, video surveillance, and marketing. At the same time, the number of data breach notifications reached 22,435, up 51%, with frequent causes including misaddressed mail, sharing with unauthorized recipients, or unlawful access to databases.

The authority conducted 76 inspections, 52% more than the previous year, and imposed 32 administrative fines in 20 separate cases totaling 64,436,940.25 zlotys. This amount represents an increase of 363% compared to 2024. The UODO also filed 8 reports of suspected criminal offenses, including a notable case concerning the creation of images of a minor via artificial intelligence, based on Article 107, paragraph 1, of the Polish data protection law.

In addition to its supervisory tasks, the authority issued 981 opinions on draft legislative texts and carried out 43 interventions on various topics, such as surveillance in schools or the use of the PESEL database. The UODO also actively participated in the work of the European Data Protection Board (EDPB), contributing to the development of guidelines and opinions.