Poland: Issued Personal Data Protection Office order prohibiting Meta from publishing advertisements using Omenaa Mensah's data in Poland

On 8 August 2024, the Polish Personal Data Protection Office (UODO) issued a ruling prohibiting Meta from displaying false advertisements on Facebook and Instagram in Poland that misuse the personal data and image of journalist Omenaa Mensah. The order, which will be effective for three months, follows Mensah's complaint regarding deepfake ads falsely claiming events such as her death, assault, and imprisonment. In particular, Mensah identified 263 such ads, which negatively impacted her sense of safety, dignity, and privacy, as well as the emotional well-being of her close ones. The decision was made under Articles 60(1) of the General Data Protection Regulation (GDPR) and 70(1) and (2) of the Polish Data Protection Act. The Irish data protection authority will continue the investigation after UODO reported its findings, as Meta Platforms Ireland Limited is headquartered in Ireland. UODO cited the urgent need to protect Mensah's rights and freedoms, invoking Article 66(1) of the GDPR for this temporary measure. Finally, the UODO has also informed other relevant supervisory authorities, the European Data Protection Board, and the Commission about this action.