14.02.2020 r.
Can the person issuing an e-prescription provide the patient with a 4-digit access code by phone?
Healthcare facilities are sending questions to the Personal Data Protection Office which relate to the situations in which patients request
[ ... ]
12.02.2020 r.
Software updates help to ensure data security
Updates are an integral part of the IT world, and hence it is important to be aware that regular updating
[ ... ]
12.12.2019 r.
The Court accepted the view of the President of the UODO. Amount of the fine to be re-examined
The entity collecting entrepreneurs’ personal data from open records for the purpose of providing commercial services is obliged to fulfil
[ ... ]
After one and a half year of operation of the Personal Data Protection Office, the structure of the Polish data
[ ... ]
26.11.2019 r.
T4DATA: the effects of activities summarized and the agreement on further cooperation signed
Although the implementation of the project "T4DATA - Training Data Protection Authorities and Data Protection Officers" is coming to an
[ ... ]
22.11.2019 r.
The EDPB welcomes comments on the Guidelines 4/2019 on Data Protection by Design and by Default
The comments should be sent to the European Data Protection Board by 16th of January 2020 at the latest.
[ ... ]
06.11.2019 r.
Withdrawal of consent shall not be impeded
The President of the Personal Data Protection Office imposed an administrative fine of over PLN 201,000 for, inter alia, obstructing
[ ... ]
The President of the Personal Data Protection Office (“The President of the Office”) imposed first administrative fine of PLN 40,000
[ ... ]
GDPR in practice
Complaints
Controller
- How to notify the President of the Personal Data Protection Office of data breach?
- Obligations related to personal data breaches
- Notification of data breaches by telecommunications operators
- Risk analysis (more in Polish)
- Records of processing activities (more in Polish)
- Prior consultation
- Inspections
Data Protection Officer
- Notifying the President of the Personal Data Protection Office of designation of a DPO
- Notification to the President of the PDPO on the recall DPO / changes in information about a DPO / changes in information concerning a data controller or processor (having a DPO)
- Designation of a Data Protection Officer (DPO)
- Guarantess of independence (more in Polish)
- Tasks (more in Polish)
- DPO's cooperation with the President of the Personal Data Protection Office (more in Polish)
- Answers to questions (more in Polish)
DPO notification forms – deal with the matter online at biznes.gov.pl
Data Protection Officer
- Designation of a new Data Protection Officer (this service is also relevant for entities having Administrators of Information Security before 25 May 2018)
- Change of contact data of current Data Protection Officer
- Dismissal of the so far Data Protection Officer
- Dismissal of the so far Data Protection Officer and designation of new Data Protection Officer
Deputy Data Protection Officer
„For the purpose of sending the notification on designation of deputy DPO you have to complete a relevant form
(available below) and send it as an attachment by means of a general letter. The title of the letter shall
reflect the title of the form.”
Other forms
- Infoline (in Polish)
- 606-950-000
- Operates on weekdays from 10.00 a.m. – 2.00 p.m.
- Urząd Ochrony Danych Osobowych
- ul. Stawki 2, 00-193 Warszawa
- fax. 22 531 03 01
- kancelaria@uodo.gov.pl
- Working hours of the office: 8 a.m. – 4 p.m.