Poland permits participant recording. Article 267 of the Kodeks karny targets obtaining information not intended for you — and as a party to the conversation, you are an intended recipient.
Poland's trade show sector has grown substantially, with Poznań and Kielce hosting significant industrial events, and Warsaw an increasing share of the technology calendar. The criminal position is permissive; UODO's data-protection expectations are not.
Not legal advice. A practical summary for sales teams. Have your DPO or counsel review your process before an event.
Article 267 Kodeks karny
Article 267 §1 criminalises obtaining access to information not intended for the perpetrator by breaching security, and §3 addresses the use of recording, visual or other special devices to obtain information one is not entitled to.
The operative concept is entitlement. A rep in a conversation is entitled to hear what is said to them — that is what the conversation is. Recording it does not gain access to anything they were not already entitled to.
Polish civil courts have moved further in recent years, increasingly accepting participant recordings as evidence in civil proceedings.
So on the criminal question: one-party consent.
The UODO layer
Poland applies GDPR through the Act on the Protection of Personal Data of 10 May 2018, supervised by the Urząd Ochrony Danych Osobowych (UODO).
UODO has been an active enforcer, with a notable focus on:
- Transparency failures — not telling people clearly what is happening to their data
- Security shortcomings — inadequate protection of collected data
- Retention — keeping data with no defined limit
None of that is affected by Article 267. Recording an identifiable prospect is processing personal data, and you need:
- A lawful basis under Article 6
- Information obligations met at collection (Articles 13–14)
- Data minimisation (Article 5(1)(c))
- A defined retention period
- Accountability — documented and demonstrable
Which lawful basis
Consent (Article 6(1)(a)) is the practical choice. It is straightforward to obtain in conversation, straightforward to log, and straightforward to explain.
Legitimate interests is available in principle, but building the assessment for audio recording of an identifiable individual who could simply have been asked is difficult. UODO has not been notably generous on legitimate interests in consumer-facing contexts.
What to say at a Polish booth
"Nagrywam naszą rozmowę, żeby moje notatki były dokładne — czy to w porządku?" ("I am recording our conversation so my notes are accurate — is that alright?")
Polish business culture is direct and the request is unlikely to cause friction if the reason is practical. Frame it around accuracy.
Then:
- Wait for an explicit tak
- Keep the recording indicator visible
- Log the consent, with a timestamp
- Stop immediately on any objection
Transparency without a monologue
The Articles 13–14 information requirements are extensive. The workable pattern is layered: a short spoken first layer, plus a QR code to the full polityka prywatności in Polish.
Given UODO's demonstrated focus on transparency failures, make sure that QR code actually resolves to a readable Polish-language notice, not an English PDF.
Minimisation
If the purpose is capturing an accurate lead, that purpose completes when name, company, requirement and next step reach the CRM. Retaining raw audio beyond that has no declared purpose and extends both your retention obligation and your breach surface — the latter being an area UODO has fined on repeatedly.
Extract, then delete. This is how Confee is built: the conversation becomes structured CRM fields and raw audio need not be retained.
Polish booth checklist
Before the show
- Privacy notice in Polish, reachable by QR code
- Lawful basis documented — consent recommended
- Retention period defined
- Rejestr czynności przetwarzania updated (Article 30)
Per conversation
- Ask before starting
- Wait for an explicit tak
- Recording indicator visible
- Log the consent
- Stop on objection
After the show
- Delete raw audio once fields extracted
- Handle rights requests within one month
The short version
Poland will not prosecute you for recording your own conversation, and Polish courts will increasingly accept the recording as evidence. UODO is the part to plan for — particularly transparency and security, where its enforcement record is most active.
Ask, get a tak, keep it visible, log it, delete the audio.
Related reading:
- Is Recording Sales Conversations Legal? — the cross-jurisdiction overview
- Recording Consent at German Trade Shows — the strictest neighbouring regime
- GDPR-Compliant Lead Capture — the data-protection side in full
FAQ
Is it legal to record a conversation you participate in in Poland?
Generally yes. Article 267 Kodeks karny criminalises obtaining information not intended for you. A participant is an intended recipient, so the provision does not apply. Poland is one-party consent on the criminal question.
Who enforces GDPR in Poland?
UODO — the Urząd Ochrony Danych Osobowych — applying GDPR with the Polish Act of 10 May 2018. It has been active, particularly on transparency and security failures.
Do Polish courts accept recordings as evidence?
Polish civil courts have increasingly accepted participant recordings. Evidential acceptance does not resolve the data-protection position — obtaining and processing remain separate questions.
What should a rep say before recording at a Polish booth?
"Nagrywam naszą rozmowę, żeby moje notatki były dokładne — czy to w porządku?" Wait for an explicit tak, keep the indicator visible, and log the consent.