Personal Data Protection

On 14 April 2016 the European Parliament adopted the General Data Protection Regulation (GDPR), which comes into effect in two years' time, in May 2018. The Regulation will apply directly in Poland without having to be implemented by statute.

One of the main amendments introduced by the GDPR is that the public authorities that control personal data processing in Member States (in Poland, the General Inspector for Personal Data Protection – GIODO) will now have the power to impose  heavy fines on enterprises that fail to comply with the GDPR, with the highest fine being up to 4% of an enterprise's global turnover, though not more than 20 million EUR.

More information here: Główny Inspektor Ochrony Danych Osobowych

 Top of page