The article discusses a significant ruling by the Administrative Court in Poland regarding the Polish Post’s violation of the General Data Protection Regulation (GDPR) during the controversial organization of postal voting in the spring of 2020. This decision stems from a contentious initiative where the Polish government, amid the COVID-19 pandemic, attempted to conduct the presidential elections exclusively by mail without appropriate legal adjustments to the electoral law. The Polish Post was directed by the then-Premier to prepare for these postal elections and requested personal data of approximately 30 million adults from the PESEL database to facilitate this process.

The court's ruling is a critical moment for data protection in Poland, as it emphasizes the accountability of state entities when handling personal information, particularly in the context of emergency measures like the pandemic. The Polish Post, acting under governmental instructions, collected vast amounts of data without clear legal backing, which raised significant concerns about compliance with GDPR, affecting the public trust in how personal data is managed. The court's decision mandates a re-evaluation of this data handling and the associated fines, as the implications of the ruling resonate beyond just the monetary aspect, highlighting the need for stricter adherence to data protection laws.

This ruling might prompt a broader discussion on the regulation and protection of personal data in Poland, especially how authorities manage such data during crises. It also reflects the tensions between governmental responses to emergencies and individual rights, suggesting that future actions by the government must better balance these considerations. As the case unfolds, it will be essential to monitor how such rulings influence both political actions and public discourse regarding GDPR adherence in Poland.