Poland: Lawsuit relating to classification of internet protocol addresses and cookie identifiers as personal data under General Data Protection Regulation
Progress
Current status
in force
16 Oct 2025 in force
11 Jul 2022 under investigation
Scope
Implementers
Poland
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
software provider: other software
Government Branch
judiciary
Government Body
court
Implementation Level
national
Timeline of events
Supreme Administrative Court issued ruling concluding that online identifiers are not automatically personal data under General Data Protection Regulation
On 16 October 2025, Poland's Supreme Administrative Court issued a ruling in the lawsuit relating to the classification of Internet Protocol (IP) addresses and cookie identifiers as personal data under the General Data Protection Regulation. The Cou…
Event type
public lawsuit
Action type
ruling
Government branch
judiciary
Government body
court
Provincial Administrative Court of Warsaw issued ruling in lawsuit relating to classification of internet protocol addresses and cookie identifiers as personal data under General Data Protection Regulation
On 11 July 2022, the Provincial Administrative Court in Warsaw issued a ruling regarding a website operator's alleged General Data Protection Regulation violations. The Court found that the Office of the Polish Data Protection Commissioner failed to…
Event type
public lawsuit
Action type
interim ruling
Government branch
judiciary
Government body
court