The article analyses the issue of limitation periods o of administrative fines imposed by the President of the Polish Data Protection Authority (PUODO) for violations of the GDPR. The aim of the publication is to assess whether the absence of an explicit regulation on limitation periods directly in the GDPR excludes the application of national provisions on this matter, as set out in the Code of Administrative Procedure. The authors argue that the five-year limitation period for both the imposition and enforcement of a fine, established in Article 189g of the Code of Administrative Procedure, should apply to penalties provided for in Art. 83 of the GDPR. The article also discusses the opposing view, reflected in the positions of the supervisory authority, which questions the permissibility of applying national limitation period to the sanctions arising from the GDPR. The article employs several mutually complementary research methods, including the dogmatic-legal method, which involves analysing and interpretation of the content of applicable law, both EU and national, as well as the decisions of the President of the UODO and the case law of courts and tribunals. Additionally, the historical-legal method was used to show the evolution of the statute of limitations in administrative proceedings.