Poland's Personal Data Protection Office (UODO) has levied its first fine under the General Data Protection Regulation (GDPR), issuing a €220,000 ($246,318) penalty against digital marketing firm Bisnode. The fine was for breaching Article 14 data subject rights. UODO claimed Bisnode did not directly inform around 5.7 million people that it was using their personal data scraped from the internet. According to Europol, in 2014 there were over 1 billion unique internet users worldwide. Bisnode, which plans to appeal the decision, said it would cost around €8m in admin to meet its Article 14 obligations.
Poland's Personal Data Protection Office (UODO) has levied its first fine under the General Data Protection Regulation (GDPR), issuing a €220,000 ($246,318) penalty against digital marketing firm Bisnode. The fine was for breaching Article 14 data subject rights. UODO claimed Bisnode did not directly inform around 5.7 million people that it was using their personal data scraped from the internet. Instead, the firm posted a notice on its website, which UODO said was not a "proportionate effort". Bisnode, which plans to appeal the decision, said it would cost around €8m in admin to meet its Article 14 obligations.