CoE Framework Convention signatory
This content is for informational and educational purposes only and does not constitute legal advice.
On 18 September 2025, the President of the Personal Data Protection Office (UODO) presented a proposal to introduce a law protecting individuals from harmful deepfakes. The proposal focuses on technology companies and social media platforms hosting manipulated images, audio, or video of identifiable persons. It proposes legal accountability for creating and sharing deepfakes, stronger personal data protection, mandatory platform detection and labelling systems, rapid removal of illegal content, and public education on deepfake risks. It was highlighted that current Polish law provides partial protection against deepfakes through copyright, civil, penal, and Artificial Intelligence regulations, but does not fully address their specific risks. Key gaps include limited liability rules for creators, insufficient platform obligations, and lack of fast mechanisms to remove harmful content.
On 25 August 2025, the Polish Office of Competition and Consumer Protection (UOKiK) opened an investigation into Netflix over increased subscription fees applied without explicit consumer consent. UOKiK noted that Netflix treated users’ silence as acceptance of higher charges, a practice in noncompliance with consumer protection rules. The UOKiK emphasised that service providers cannot unilaterally change essential contract terms, such as price, especially when payments are automatically charged. Such practices may result in fines of up to 10% of turnover and potential refunds for incorrectly charged fees. UOKiK also stated that it is reviewing the policies and practices of other providers, including Apple, Disney+, Google (YouTube Premium), HBO Max, Microsoft (GamePass), Sony (PlayStation Plus), and Adobe, with some companies already committing to adjust their practices.
On 12 August 2025, Poland’s Competition Authority (UOKiK) found Booking in breach of consumer rights rules for using ambiguous terms of service. Under the Omnibus Directive deriving Amendments concerning Consumers' Rights and Unfair Market Practices, the consumer is entitled to information about the selling entity and has rights regarding the transparency of information regarding contractual obligations. Booking has been found in violation of these rights on several counts. First, for failing to inform consumers about whether a third party on the Booking.com website is an entrepreneur, which impacts their legal obligations to the consumer. Second, for failing to inform consumers about the non-application of consumer regulations to certain contracts formed on the website in circumstances where the third party is not legally classified as an entrepreneur. Third, for failing to inform customers about the division of obligations between the third party and Booking in contracts formed on Booking.com. Booking has been ordered to resolve these issues and compensate users.
On 11 February 2025, the Ministry of Digital Affairs published the revised version of the draft Act on Artificial Intelligence (AI) Systems. The draft introduces several changes, including the establishment of regulatory sandboxes to support AI innovation and testing. The draft also includes provisions for financial support for AI-related research and development, both from the state and the European Union. Additionally, the Act introduces new control rules, focusing on remote supervision of AI system operations and the introduction of an extraordinary leniency agreement mechanism. The revised composition of the Artificial Intelligence Development and Security Commission adds representatives from key sectors such as law and medicine, aiming to ensure comprehensive oversight of AI applications.
Last updated: 18/09/2025