Article 101 PDPA
Grounds and conditions for imposing an administrative penalty

The President of the Authority may charge an entity required to comply with Regulation 2016/679 other than:

1) public finance sector unit,

2) research institute,

3) The National Bank of Poland - by decision, an administrative fine on the basis and under the conditions specified in Article 83 of Regulation 2016/679.

1. In connection with pending proceedings for the imposition of an administrative monetary penalty, the entity referred to in Article 101 shall be obliged to provide the President of the Office, whenever he so requests, within 30 days of receipt of the request, with the data necessary to determine the basis for the assessment of the administrative monetary penalty.

2. If the entity referred to in Article 101 fails to provide data, or if the data provided by the entity makes it impossible to determine the basis for the assessment of the administrative monetary penalty, the President of the Office shall determine the basis for the assessment of the administrative monetary penalty on an estimated basis, taking into account the size of the entity, the specifics of its operations, or publicly available financial data on the entity.