In this Privacy Perspectives post, Karolina Gałęzowska writes that the first post-EU General Data Protection Regulation decision by Poland's data protection authority, the PUODO, and its first fine, raises questions about the GDPR's retroactive applicability, transparency, procedural justice and legal competence. Gałęzowska argues, in this op-ed, “the issue of disproportionate punishment, alongside the question of PUODO’s competence to act, may be among the most prominent in this case.”
Full Story