Poland. ePrivacy / marketing. Act

PKEElectronic Communications Law of 12 July 2024 (Prawo komunikacji elektronicznej – PKE)

In force
Partly verifiedMedium confidence. Article numbers and Dz.U. reference from memory; verify.

§1Summary

Synopsis

Poland's 2024 Electronic Communications Law transposes the EECC and the ePrivacy rules, requiring consent for cookies (Art 399) and for direct marketing by electronic means (Art 398).

Key themes
  • cookies/terminal equipment consent
  • direct marketing
  • soft opt-in
  • traffic and location data
Unique features

Consent for marketing covers both B2C and B2B; UKE can fine up to 3% of revenue.

SaaS relevance

Any SaaS website, app or product that sets non-essential cookies/SDKs or sends marketing emails/SMS to users in this country needs prior consent (subject to exemptions) under this law, regardless of where the provider is based.

§2Obligations

Extraterritorial
Yes
Breach notification
Telecom providers: authority notification under Reg 611/2013; otherwise GDPR
DPO
No
Cross-border transfers
None
Maximum penalty
UKE: up to 3% of prior-year revenue; GDPR fines

§3Dates

Key dates
  • Adopted
  • In force
  • Dz.U. 2024 poz. 1221; replaced Telecommunications Law 2004 (old Art 173 cookies, Art 172 marketing)

§4Text and authority

Text
Authority
President of the Office of Electronic Communications (UKE); UODO; UOKiK for consumer marketing

§5Where it applies

Domestic law of
Poland

§6Sources and verification

Sources consulted
Verification

Medium confidence.

Partly verifiedMedium confidence. Article numbers and Dz.U. reference from memory; verify.