Urząd Ochrony Danych Osobowych

What Urząd Ochrony Danych Osobowych does

Urząd Ochrony Danych Osobowych (UODO) is Poland's national personal data protection supervisory authority, established in 2018 following the entry into force of GDPR (Regulation EU 2016/679, locally known as RODO) and the Polish Act of 10 May 2018 on the Protection of Personal Data. Headquartered at ul. Stanisława Moniuszki 1A in Warsaw with a staff of 72, UODO operates as a state administrative authority (organ administracji publicznej) under the leadership of the President of UODO (Prezes UODO) and deputy presidents. It functions as Poland's designated supervisory authority under GDPR Article 51 and participates as a member in the European Data Protection Board (EDPB) for cross-border matters.

UODO delivers a portfolio of regulatory and administrative services through the uodo.gov.pl portal and integrations with Polish e-government platforms biznes.gov.pl, ePUAP, and e-Doręczenia. Core services include electronic complaint filing for citizens (Składanie skarg), data breach notification for controllers (Zgłoszenie naruszenia ochrony danych), Data Protection Officer registration (IOD), whistleblower reporting (operational since December 25, 2024 at sygnalisci.uodo.gov.pl), prior consultation requests for high-risk processing, and a searchable rulings database (orzeczenia.uodo.gov.pl). Supporting infrastructure includes a telephone hotline (606-950-000), the Biuletyn UODO newsletter, Mastodon social presence, and the long-running "Twoje dane – Twoja sprawa" educational program for schools, currently in its XVII edition for school year 2026/2027. The technology stack uses Plausible Analytics, a privacy-respecting cookie-free analytics tool consistent with its data protection mandate.

UODO is funded entirely through the Polish state budget and does not generate commercial revenue; all services are provided free of charge. Its reach is national, serving Polish citizens exercising GDPR rights, organizations processing personal data, and designated Data Protection Officers. The office cooperates with DPO industry associations (SABI, SPOD, ZFODO, SIODO), Universities of the Third Age for senior protection, the European Data Protection Supervisor, and participates in the EU-funded "KPO Cyberbezpieczny Rząd" (Cyber-Secure Government) project to enhance national data protection capabilities.

Name

Urząd Ochrony Danych Osobowych

Legal name

Urząd Ochrony Danych Osobowych

Website

https://uodo.gov.pl

Company type

Public

Founded year

2018

Operating status

Operating

Headcount range

51–100 employees

Short description

Urząd Ochrony Danych Osobowych (UODO) is Poland's national personal data protection supervisory authority, established in 2018 under GDPR. Headquartered in Warsaw with 72 staff, it serves Polish citizens, data controllers, and Data Protection Officers through complaint filing, breach reporting, IOD registration, and public education, funded entirely by the state budget.

Ownership category

akta.pro rank

Product category

Data Protection Regulatory Authority

NAICS

Public Administration (92), Executive, Legislative, and Other General Government Support (9211), Regulation, Licensing, and Inspection of Miscellaneous Commercial Sectors (92615)

akta.pro primary industry

Privacy Management (Consent, DSAR, RoPA) (HDADAFAH)

Keywords

• Data protection regulation
• GDPR compliance oversight
• Privacy rights enforcement
• Regulatory authority services
• Personal data supervision

Headquarters

HQ city

Warsaw

HQ country

Poland

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B and B2C

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Infrastructure, Marketing or Sales, Others

Revenue model

1. State Budget Funding: As a government authority, UODO is funded through the Polish state budget. The office does not generate commercial revenue but operates as a regulatory body performing public functions related to data protection oversight.

Distribution channels7 records

Marketing channels9 records

Core offering

UODO is the Polish national supervisory authority for personal data protection, providing regulatory oversight of GDPR/RODO compliance through services including electronic complaint filing for citizens, data breach notification submissions for administrators, Data Protection Officer (IOD) registration, whistleblower reporting, prior consultation requests for high-risk processing, and a searchable rulings database. All services are delivered free of charge via integrated government e-government portals (biznes.gov.pl, ePUAP, e-Doręczenia) and the office's website.

Product overview

Urząd Ochrony Danych Osobowych (Polish Personal Data Protection Office) is the national data protection authority and does not offer commercial software products. Instead, it provides a portfolio of regulatory and administrative services including: complaint filing for citizens whose data rights are violated, data breach notification submissions for administrators, Data Protection Officer (IOD) registration and management, whistleblower reporting channels for legal violations in data protection, prior consultation requests for high-risk processing operations, public information requests, a searchable rulings database, telephone hotline, newsletter publication, and the 'Twoje dane – Twoja sprawa' educational program for schools. These services are delivered primarily through electronic government portals (biznes.gov.pl, ePUAP, e-Doręczenia) and the institution's website, with the hotline providing phone-based support.

Differentiator

Problem solved

Functional benefit

Products and services

• Składanie skarg (Complaint Filing)
• Zgłoszenie naruszenia ochrony danych (Data Breach Notification)
• Zgłoś IOD (Data Protection Officer Registration)
• Zgłoszenia sygnalisty (Whistleblower Reporting)
• Wniosek o uprzednie konsultacje (Prior Consultation Request)
• Wniosek o udostępnienie informacji publicznej (Public Information Request)
• Portal orzeczeń UODO (UODO Rulings Portal)
• Infolinia UODO (UODO Hotline)
• Biuletyn UODO (UODO Bulletin)
• Program Twoje dane – Twoja sprawa (Your Data – Your Concern)

Segments4 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration4 records

Feature4 records

Partnerships

Seven partnerships are on record, tiered core and minor.

• Europejska Rada Ochrony Danych (European Data Protection Board - EDPB)coreStrategic or Co-development PartnerUODO participates as the Polish supervisory authority in the European Data Protection Board (EDPB), which coordinates data protection regulations across EU member states. This includes contributing to guidelines, recommendations, and best practices, participating in plenary sessions, and engaging in coordinated enforcement actions such as the CEF DPO coordinated activity.
• Uniwersytety Trzeciego Wieku (Universities of the Third Age)minorStrategic or Co-development PartnerUODO has established agreements with Universities of the Third Age (senior learning institutions) to provide data protection education and resources specifically designed for seniors, including guidance on protecting older adults from scams and fraud.
• SABI – Stowarzyszenie Inspektorów Ochrony Danych (Association of Data Protection Officers)minorStrategic or Co-development PartnerSABI (Association of Data Protection Officers) collaborates with UODO on matters related to DPO independence and professional standards, participating in working groups and consultation processes.
• SPOD – Stowarzyszenie Praktyków Ochrony Danych (Association of Data Protection Practitioners)minorStrategic or Co-development PartnerSPOD works with UODO on promoting best practices among Data Protection Officers and improving the professional standing of DPOs in Poland.
• ZFODO – Związek Firm Ochrony Danych Osobowych (Union of Data Protection Companies)minorStrategic or Co-development PartnerZFODO collaborates with UODO on industry standards for data protection services and DPO professional certification matters.
• SIODO – Stowarzyszenie Inspektorów Ochrony Danych Osobowych (Association of Personal Data Protection Officers)minorStrategic or Co-development PartnerSIODO engages with UODO on strengthening respect for constitutional rights to privacy and effective implementation of GDPR in Poland.
• European Data Protection Supervisor (EDPS)minorStrategic or Co-development PartnerUODO maintains cooperation with the European Data Protection Supervisor for matters related to EU institutional data processing and international data protection standards.

Scale indicators2 records

Recent moves1 record

Expansion highlights5 records

Direct peers

• Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI): Germany's federal data protection commissioner. Closely comparable to UODO in regulatory mandate under GDPR, with parallel functions including complaint handling, breach oversight, IOD engagement, and EDPB participation.
• Österreichische Datenschutzbehörde (DSB): Austria's data protection authority. Operates with the same GDPR-mandated supervisory functions as UODO, including enforcement, complaint handling, and participation in EDPB coordination.
• Commission Nationale de l'Informatique et des Libertés (CNIL): France's national data protection supervisory authority under GDPR Article 51. Operates with a similar mandate to UODO: enforcing GDPR, handling citizen complaints, conducting investigations, imposing administrative penalties, and issuing binding guidance within France.
• Information Commissioner's Office (ICO): The UK's independent data protection authority. Comparable to UODO in handling complaints, registering controllers, conducting audits, and issuing guidance, though operating under UK GDPR rather than EU GDPR post-Brexit.
• Garante per la protezione dei dati personali: Italy's national data protection authority. Mirrors UODO's role under GDPR for the Italian jurisdiction, including complaint resolution, enforcement actions, prior consultations, and IOD registration oversight.
• Autoriteit Persoonsgegevens (AP): The Netherlands' national data protection authority. Comparable to UODO in enforcing GDPR, handling complaints, conducting investigations, and issuing binding guidance, with similar EDPB coordination responsibilities.
• Autorité de protection des données (APD / CBAAPD): Belgium's national data protection authority. Comparable to UODO in regulatory mandate and operational scope under GDPR, with parallel complaint, enforcement, and IOD-related functions.
• Agencia Española de Protección de Datos (AEPD): Spain's national data protection supervisory authority. Functionally equivalent to UODO in scope, mandate, and operating model under the GDPR framework, serving citizens and data controllers within Spain.

Broad incumbents

• European Data Protection Board (EDPB): The EU body in which UODO participates as the Polish supervisory authority. EDPB coordinates the consistent application of GDPR across member states, issuing binding decisions and guidelines that shape UODO's national-level enforcement approach.
• European Data Protection Supervisor (EDPS): The EU's independent data protection authority supervising EU institutions and bodies. While UODO operates at the national level, the EDPS is the supranational counterpart with whom UODO cooperates on EU institutional data processing and coordinated supervisory matters.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat3 records

Key risks5 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/urz%C4%85d-ochrony-danych-osobowych

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Urząd Ochrony Danych Osobowych